Vulnerabilities > Cisco > Unified Communications Domain Manager > 10.5.2.10000.5

DATE CVE VULNERABILITY TITLE RISK
2018-02-22 CVE-2018-0124 Key Management Errors vulnerability in Cisco Unified Communications Domain Manager
A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated privileges, and execute arbitrary code.
network
low complexity
cisco CWE-320
critical
 9.8
9.8
2017-11-16 CVE-2017-12302 SQL Injection vulnerability in Cisco Unified Communications Domain Manager
A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection.
network
low complexity
cisco CWE-89
4.3
4.3