Vulnerabilities > Zyxel > Gs1900 10Hp Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2016-02-09 CVE-2016-1319 Information Exposure vulnerability in multiple products
Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext encryption key, which allows local users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuv85958.
network
low complexity
sun samsung zyxel zzinc CWE-200
5.3
2016-02-09 CVE-2016-1317 Information Exposure vulnerability in Zyxel Gs1900-10Hp Firmware 2.40
Cisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request to an unspecified URL, aka Bug ID CSCuy11098.
network
low complexity
zyxel CWE-200
4.3
2016-02-07 CVE-2016-1307 Credentials Management vulnerability in multiple products
The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085.
network
low complexity
zyxel zzinc CWE-255
5.4