Cisco Unified Communications Manager 4.1
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*
part: a version: 4.1 update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Unified Communications Manager (a7888539-c4de-5fea-ae30-f5df0e62c9a1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-0592 |
vulnerable | 2026-06-08 04:52:03.523742 |
Details available
The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)sr1a, 6.x before 6.1(3), 7.0x before 7.0(2), 7.1x before 7.1(2), and 8.x before 8.0(1) allows remote attackers to cause a denial of service (service failure) via a malformed message, aka Bug ID CSCsu31800.
Published: 2010-03-05T16:00:00.000Z
Updated: 2024-09-16T19:20:58.412Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0587 |
vulnerable | 2026-06-08 04:52:03.479179 |
Details available
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)SR2, 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field, aka Bug ID CSCtc38985.
Published: 2010-03-05T16:00:00.000Z
Updated: 2024-09-17T03:07:37.219Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0632 |
vulnerable | 2026-06-08 04:51:10.574331 |
Details available
The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 before 4.2(3)SR4b, 4.3 before 4.3(2)SR1b, 5.x before 5.1(3e), 6.x before 6.1(3), and 7.0 before 7.0(2) sends privileged directory-service account credentials to the client in cleartext, which allows remote attackers to modify the CUCM configuration and perform other privileged actions by intercepting these credentials, and then using them in requests unrelated to the intended synchronization task, as demonstrated by (1) DC Directory account credentials in CUCM 4.x and (2) TabSyncSysUser account credentials in CUCM 5.x through 7.x.
Published: 2009-03-12T15:00:00.000Z
Updated: 2024-08-07T04:40:05.122Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3801 |
vulnerable | 2026-06-08 04:50:36.374690 |
Details available
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsm46064, a different vulnerability than CVE-2008-3800 and CVE-2008-3802.
Published: 2008-09-26T16:00:00.000Z
Updated: 2024-08-07T09:52:59.636Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3800 |
vulnerable | 2026-06-08 04:50:36.373430 |
Details available
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsu38644, a different vulnerability than CVE-2008-3801 and CVE-2008-3802.
Published: 2008-09-26T16:00:00.000Z
Updated: 2024-08-07T09:53:00.234Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1746 |
vulnerable | 2026-06-08 04:50:21.701724 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1745 |
vulnerable | 2026-06-08 04:50:21.695621 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1742 |
vulnerable | 2026-06-08 04:50:21.676762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.