Cisco Unified Communications Manager IM & Presence Service und Unified Communications Manager (CUCM): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 6.5
  CVE-2024-20457

  Cisco Unified Communications Manager IM & Presence Service Information Disclosure Vulnerability

  A vulnerability in the logging component of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerabilit…

  Cisco Cisco Unified Communications Manager IM and Presence Service Network devices
  Nov 6, 2024
• Medium 6.1
  CVE-2024-20511

  Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

  A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-…

  Cisco Cisco Unified Communications Manager Network devices
  Nov 6, 2024

Revision history

1. 2024-11-06 #1

   Initiale Fassung

References

• Cisco Security Advisory vom 2024-11-06
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-inf-disc-cUPKuA5n?amp%3B_Presence_Service_Information_Disclosure_Vulnerability%26vs_k=1
• Cisco Security Advisory vom 2024-11-06
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-SVCkMMW