CVE-2018-0198CWE-693

CVE-2018-0198: vulnerability in Cisco Unified Communications Manager

Published 27 Mar 2018 · Updated 02 Dec 2024

Follow this CVE + Monitor Cisco Unified Communications Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. A successful exploit could allow the attacker to view data library information. Cisco Bug IDs: CSCvh66592.

Affected products

n/a · Cisco Unified Communications Manager

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-ucm1 http://www.securityfocus.com/bid/102965 http://www.securitytracker.com/id/1040342