Vulnerabilities > Cisco > Unified Communications Manager > 5.0.1

DATE CVE VULNERABILITY TITLE RISK
2009-01-22 CVE-2009-0057 Improper Input Validation vulnerability in Cisco Unified Communications Manager
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the "client terminates prematurely."
network
cisco CWE-20
4.3
2008-02-14 CVE-2008-0026 SQL Injection vulnerability in Cisco products
SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages.
network
low complexity
cisco CWE-89
6.5