Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:unified_communications_manager:8.5\(1\)su4:*:*:*:*:*:*:*

part: a version: 8.5(1)su4 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductUnified Communications Manager (a7888539-c4de-5fea-ae30-f5df0e62c9a1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0657 vulnerable 2026-06-08 05:05:13.904531 Details available
The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540.
Published: 2014-01-08T21:00:00.000Z
Updated: 2024-08-06T09:20:19.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6978 vulnerable 2026-06-08 05:05:07.591668 Details available
The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249.
Published: 2013-12-21T11:00:00.000Z
Updated: 2024-08-06T17:53:45.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6689 vulnerable 2026-06-08 05:04:57.880773 Details available
Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229.
Published: 2013-11-16T02:00:00.000Z
Updated: 2024-09-16T16:14:02.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6688 vulnerable 2026-06-08 05:04:57.871760 Details available
Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222.
Published: 2013-11-16T02:00:00.000Z
Updated: 2024-09-17T02:22:08.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3462 vulnerable 2026-06-08 05:04:31.686702 Details available
Buffer overflow in Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(2) allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Bug ID CSCud54358.
Published: 2013-08-25T01:00:00.000Z
Updated: 2024-08-06T16:07:38.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3461 vulnerable 2026-06-08 05:04:31.685236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3460 vulnerable 2026-06-08 05:04:31.684631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3453 vulnerable 2026-06-08 05:04:31.631236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3434 vulnerable 2026-06-08 05:04:31.486732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3433 vulnerable 2026-06-08 05:04:31.485169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3412 vulnerable 2026-06-08 05:04:31.439200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3404 vulnerable 2026-06-08 05:04:31.413283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3403 vulnerable 2026-06-08 05:04:31.405541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3402 vulnerable 2026-06-08 05:04:31.396267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.