Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:call_manager:4.3:*:*:*:*:*:*:*

part: h version: 4.3 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductCall Manager (9999a58d-5e0f-5fcc-81e0-546f89cf4af9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4634 vulnerable 2026-06-08 04:49:56.885029 Details available
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265.
Published: 2007-08-31T23:00:00.000Z
Updated: 2024-08-07T15:01:09.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4633 vulnerable 2026-06-08 04:49:56.875322 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the (1) user or (2) admin logon page, aka CSCsi10728.
Published: 2007-08-31T23:00:00.000Z
Updated: 2024-08-07T15:01:10.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3109 vulnerable 2026-06-08 04:49:08.343197 Details available
Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web script or HTML via the (1) pattern parameter in ccmadmin/phonelist.asp and (2) arbitrary parameters in ccmuser/logon.asp, aka bugid CSCsb68657.
Published: 2006-06-21T01:00:00.000Z
Updated: 2024-08-07T18:16:05.751Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.