Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*

part: a version: 6.1 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductUnified Communications Manager (a7888539-c4de-5fea-ae30-f5df0e62c9a1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0592 vulnerable 2026-06-08 04:52:03.524479 Details available
The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)sr1a, 6.x before 6.1(3), 7.0x before 7.0(2), 7.1x before 7.1(2), and 8.x before 8.0(1) allows remote attackers to cause a denial of service (service failure) via a malformed message, aka Bug ID CSCsu31800.
Published: 2010-03-05T16:00:00.000Z
Updated: 2024-09-16T19:20:58.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0591 vulnerable 2026-06-08 04:52:03.522922 Details available
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID CSCtc62362.
Published: 2010-03-05T16:00:00.000Z
Updated: 2024-09-16T18:19:04.689Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0588 vulnerable 2026-06-08 04:52:03.513377 Details available
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SCCP (1) RegAvailableLines or (2) FwdStatReq message with an invalid Line number, aka Bug ID CSCtc47823.
Published: 2010-03-05T16:00:00.000Z
Updated: 2024-09-16T18:14:35.265Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0587 vulnerable 2026-06-08 04:52:03.504802 Details available
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)SR2, 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field, aka Bug ID CSCtc38985.
Published: 2010-03-05T16:00:00.000Z
Updated: 2024-09-17T03:07:37.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0632 vulnerable 2026-06-08 04:51:10.584111 Details available
The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 before 4.2(3)SR4b, 4.3 before 4.3(2)SR1b, 5.x before 5.1(3e), 6.x before 6.1(3), and 7.0 before 7.0(2) sends privileged directory-service account credentials to the client in cleartext, which allows remote attackers to modify the CUCM configuration and perform other privileged actions by intercepting these credentials, and then using them in requests unrelated to the intended synchronization task, as demonstrated by (1) DC Directory account credentials in CUCM 4.x and (2) TabSyncSysUser account credentials in CUCM 5.x through 7.x.
Published: 2009-03-12T15:00:00.000Z
Updated: 2024-08-07T04:40:05.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0057 vulnerable 2026-06-08 04:51:07.407450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3801 vulnerable 2026-06-08 04:50:36.374742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3800 vulnerable 2026-06-08 04:50:36.374049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2730 vulnerable 2026-06-08 04:50:31.825801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1746 vulnerable 2026-06-08 04:50:21.702011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1745 vulnerable 2026-06-08 04:50:21.701081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1744 vulnerable 2026-06-08 04:50:21.694410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1742 vulnerable 2026-06-08 04:50:21.682338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1154 vulnerable 2026-06-08 04:50:19.385625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0026 vulnerable 2026-06-08 04:50:09.978226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.