Cisco Call Manager 3.3.3
Approved changes feed: RSS · Atom
cpe:2.3:h:cisco:call_manager:3.3\(3\):*:*:*:*:*:*:*
part: h version: 3.3(3) update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Call Manager (9999a58d-5e0f-5fcc-81e0-546f89cf4af9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-2832 |
vulnerable | 2026-06-08 04:49:46.232488 |
Details available
Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp (aka the search-form) and possibly other unspecified vectors.
Published: 2007-05-24T01:29:00.000Z
Updated: 2024-08-07T13:49:57.583Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3109 |
vulnerable | 2026-06-08 04:49:08.334417 |
Details available
Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web script or HTML via the (1) pattern parameter in ccmadmin/phonelist.asp and (2) arbitrary parameters in ccmuser/logon.asp, aka bugid CSCsb68657.
Published: 2006-06-21T01:00:00.000Z
Updated: 2024-08-07T18:16:05.751Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0368 |
vulnerable | 2026-06-08 04:48:53.629549 |
Details available
Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727.
Published: 2006-01-22T20:00:00.000Z
Updated: 2024-08-07T16:34:14.807Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0367 |
vulnerable | 2026-06-08 04:48:53.623072 |
Details available
Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."
Published: 2006-01-22T20:00:00.000Z
Updated: 2024-08-07T16:34:13.895Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0356 |
vulnerable | 2026-06-08 04:48:12.358791 |
Details available
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
Published: 2005-05-31T04:00:00.000Z
Updated: 2024-08-07T21:13:53.238Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1760 |
vulnerable | 2026-06-08 04:48:07.522412 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1759 |
vulnerable | 2026-06-08 04:48:07.512934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.