Skip to content
Sign in
5.3 Medium

CVE-2019-1837 A vulnerability in the User Data Services (UDS) API of Cisco Unified Communications Manager (Unified CM) could allow…

Description

A vulnerability in the User Data Services (UDS) API of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the management GUI. The vulnerability is due to improper validation of input parameters in the UDS API requests. An attacker could exploit this vulnerability by sending a crafted request to the UDS API of an affected device. A successful exploit could allow the attacker to make the A Cisco DB service quit unexpectedly, preventing admin access to the Unified CM management GUI. Manual intervention may be required to restore normal operation. Software versions 10.5, 11.5, 12.0, 12.5 are affected.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Communications Manager 12.5 No fix stated
Cisco Unified Communications Manager 12.0 No fix stated
Cisco Unified Communications Manager 11.5 No fix stated
Cisco Unified Communications Manager 10.5 No fix stated

Other CVEs of Cisco Unified Communications Manager

The 62 CVEs of Cisco Unified Communications Manager →
CVE-2026-76419 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability 6.1 Medium CVE-2026-76481 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.5 High CVE-2026-76487 A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session… 5.3 Medium CVE-2026-76479 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.8 High
Track this CVE