cisco-sa-cucm-sql-rpPczR8n
Cisco PSIRTHIGH2023-01-18
Cisco Unified Communications Manager SQL Injection Vulnerability
CVEs:CVE-2023-20010
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-88444 | affected | Cisco | — | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
Cisco Unified Communications Manager SQL Injection Vulnerability
CVEs:CVE-2023-20010
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-88444 | affected | Cisco | — | — |
Cisco Email Security Appliance URL Filtering Bypass Vulnerability
CVEs:CVE-2023-20057
Cisco BroadWorks Application Delivery Platform and Xtended Services Platform Denial of Service Vulnerability
CVEs:CVE-2023-20020
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-282087 | affected | Cisco | — | — |
Cisco BroadWorks Application Delivery Platform, Application Server, and Xtended Services Platform Cross-Site Scripting Vulnerability
CVEs:CVE-2023-20019
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-282087 | affected | Cisco | — | — |
Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability
CVEs:CVE-2023-20058
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-198393 | affected | Cisco | — | — |
| CVRFPID-244955 | affected | Cisco | — | — |
| CVRFPID-7500 | affected | Cisco | — | — |
| CVRFPID-92631 | affected | Cisco | — | — |
Cisco CX Cloud Agent Privilege Escalation Vulnerabilities
CVEs:CVE-2023-20043CVE-2023-20044
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-286473 | affected | Cisco | — | — |
Cisco Industrial Network Director Vulnerabilities
CVEs:CVE-2023-20037CVE-2023-20038
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-227667 | affected | Cisco | — | — |
Cisco IP Phone 7800 and 8800 Series Web Management Interface Authentication Bypass Vulnerability
CVEs:CVE-2023-20018
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-277608 | affected | Cisco | — | — |
Cisco Webex Room Phone and Cisco Webex Share Link Layer Discovery Protocol Memory Leak Vulnerability
CVEs:CVE-2023-20047
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-278888 | affected | Cisco | — | — |
Cisco Network Services Orchestrator Path Traversal Vulnerability
CVEs:CVE-2023-20040
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-227765 | affected | Cisco | — | — |
Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities
CVEs:CVE-2023-20008CVE-2023-20002
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-265966 | affected | Cisco | — | — |
| CVRFPID-278404 | affected | Cisco | — | — |
Cisco Small Business RV160 and RV260 Series VPN Routers Remote Command Execution Vulnerability
CVEs:CVE-2023-20045
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-183630 | affected | Cisco | — | — |
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution and Denial of Service Vulnerability
CVEs:CVE-2023-20007
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-183630 | affected | Cisco | — | — |
Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Vulnerabilities
CVEs:CVE-2023-20025CVE-2023-20026CVE-2023-20118
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-183630 | affected | Cisco | — | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.