8.8
Élevée
CVE-2021-1362 A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager…
Description
A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, and Cisco Prime License Manager could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper sanitization of user-supplied input. An attacker could exploit this vulnerability by sending a SOAP API request with crafted parameters to an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges on the underlying Linux operating system of the affected device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Unity Connection | Versions non publiées |
Autres CVE de Cisco Unity Connection
Les 39 CVE de Cisco Unity Connection →
CVE-2026-76481
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…
7.5
Élevée
CVE-2026-76479
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…
7.8
Élevée
CVE-2026-76478
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…
8.8
Élevée
CVE-2026-76476
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…
8.8
Élevée