cisco call manager

Name: cisco call manager
Brand: cisco

productUS

cpe:2.3:h:cisco:call_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical4high13medium1low

updated 2026-10-28

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2005-0356US	medium5.0	82.8% (100th)	Exploit	no fix	2005-05-31	10 versions
CVE-2006-3109US	medium4.3	13.7% (96th)	Exploit	no fix	2006-06-21	21 versions
CVE-2007-2832US	medium4.3	6.49% (94th)	Exploit	no fix	2007-05-24	19 versions
CVE-2007-4634US	high9.3	4.31% (91st)	Exploit	no fix	2007-08-31	16 versions
CVE-2004-0112US	medium5.0	10.4% (96th)	—	no fix	2004-11-23	—
CVE-2004-0079US	high7.5	9.54% (95th)	—	no fix	2004-11-23	—
CVE-2004-0081US	medium5.0	7.23% (94th)	—	no fix	2004-11-23	—
CVE-2004-1760US	high10.0	3.80% (90th)	—	no fix	2004-01-21	10 versions
CVE-2006-0368US	high7.8	3.72% (90th)	—	no fix	2006-01-22	23 versions
CVE-2005-2244US	medium5.0	3.33% (89th)	—	no fix	2005-07-12	4 versions
CVE-2004-1759US	medium5.0	2.43% (84th)	—	no fix	2004-01-21	10 versions
CVE-2006-0367US	medium6.5	2.17% (82nd)	—	no fix	2006-01-22	18 versions
CVE-2002-0505US	medium5.0	1.77% (78th)	—	no fix	2002-08-12	2 versions
CVE-2007-5468US	medium5.0	1.59% (76th)	—	no fix	2007-10-16	= 5.1.1.3000
CVE-2005-2241US	medium5.0	1.26% (69th)	—	no fix	2005-07-12	4 versions
CVE-2005-2243US	medium5.0	1.26% (69th)	—	no fix	2005-07-12	4 versions
CVE-2007-1467US	low3.5	1.23% (69th)	—	no fix	2007-03-16	—
CVE-2007-4633US	medium4.3	1.22% (69th)	—	no fix	2007-08-31	17 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-399CWE-3993 CVEs
CWE-264CWE-2642 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.