CVE-2018-0474: fallo de gravedad media en Cisco Unified Communications Manager
Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.3epss 1.5%
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could exploit this vulnerability by logging in to the Cisco Unified Communications Manager web-based management interface and viewing the source code for the configuration page. A successful exploit could allow the attacker to recover passwords and expose those accounts to further attack.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Productos afectados
Cisco · Cisco Unified Communications ManagerCVEs relacionadas — Cisco Unified Communications Manager
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-20230HIGHCisco Unified Communications Manager Server-Side Request Forgery VulnerabilityEPSS 88.5%KEVCVE-2026-20045HIGHCisco Unified Communications Products Remote Code Execution VulnerabilityEPSS 4.5%KEVCVE-2020-3177HIGHCisco Unified Communications Manager Path Traversal VulnerabilityEPSS 2.8%CVE-2019-1837MEDIUMCisco Unified Communications Manager Denial of Service VulnerabilityEPSS 2.4%CVE-2024-20253CRITICALCVE-2024-20253EPSS 2.4%CVE-2022-20790MEDIUMCisco Unified Communications Products Arbitrary File Read VulnerabilityEPSS 1.9%