cisco unified communications domain manager

Name: cisco unified communications domain manager
Brand: cisco

productUS

cpe:2.3:a:cisco:unified_communications_domain_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical4high36medium0low

updated 2026-10-27

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-3300US	high7.5	21.9% (98th)	Exploit	no fix	2014-07-07	—
CVE-2018-0124US	critical9.8	5.05% (92nd)	—	11.5\(2\)	2018-02-22	< 11.5\(2\)
CVE-2014-2198US	high10.0	3.60% (89th)	—	no fix	2014-07-07	—
CVE-2014-2197US	high9.0	2.88% (87th)	—	no fix	2014-07-07	—
CVE-2015-4229US	medium5.0	2.61% (85th)	—	no fix	2015-06-30	= 8.1.4er1
CVE-2014-3337US	medium6.8	2.39% (84th)	—	no fix	2014-08-12	≤ 8.6\(.2\)
CVE-2014-8020US	medium5.0	2.37% (84th)	—	no fix	2015-01-10	—
CVE-2014-3279US	medium5.0	2.25% (83rd)	—	no fix	2014-05-29	5 versions
CVE-2014-3320US	medium5.8	2.21% (82nd)	—	no fix	2014-07-18	5 versions
CVE-2014-3283US	medium5.8	2.21% (82nd)	—	no fix	2014-05-29	5 versions
CVE-2014-3277US	medium4.0	2.09% (82nd)	—	no fix	2014-05-29	5 versions
CVE-2015-0682US	medium6.5	2.09% (82nd)	—	no fix	2015-04-03	= 8.1(.4)
CVE-2014-3280US	medium4.0	2.03% (81st)	—	no fix	2014-06-03	5 versions
CVE-2014-3282US	medium4.0	2.03% (81st)	—	no fix	2014-05-29	5 versions
CVE-2015-0591US	medium5.0	2.02% (81st)	—	no fix	2015-01-15	= 10.0
CVE-2015-4196US	medium5.0	1.93% (80th)	—	no fix	2015-07-04	4 versions
CVE-2015-0699US	medium5.0	1.88% (79th)	—	no fix	2015-04-15	= 10.5(1.98991.13)
CVE-2015-6422US	medium4.0	1.87% (79th)	—	no fix	2015-12-14	= 10.6.1
CVE-2018-0386US	medium6.1	1.82% (79th)	—	no fix	2018-08-15	—
CVE-2015-6352US	medium4.3	1.82% (79th)	—	no fix	2015-10-30	= 10.6_base
CVE-2014-8018US	medium4.3	1.77% (78th)	—	no fix	2014-12-22	= 8.0
CVE-2014-3339US	medium6.5	1.54% (75th)	—	no fix	2014-08-12	—
CVE-2014-8010US	medium6.5	1.50% (74th)	—	no fix	2014-12-10	= 8.0
CVE-2014-3281US	medium5.0	1.35% (71st)	—	no fix	2014-06-08	—
CVE-2014-3278US	medium5.0	1.35% (71st)	—	no fix	2014-06-08	—
CVE-2015-0684US	medium6.5	1.35% (71st)	—	no fix	2015-04-03	= 8.1(.4)
CVE-2015-0683US	medium4.0	1.32% (71st)	—	no fix	2015-04-03	= 8.1(.4)
CVE-2017-6668US	medium4.9	1.31% (70th)	—	no fix	2017-06-13	= 8.1(7)er1
CVE-2015-0588US	medium6.8	1.27% (70th)	—	no fix	2015-01-15	= 10.0
CVE-2013-1230US	medium5.0	1.23% (69th)	—	no fix	2013-05-01	—
CVE-2017-6670US	medium6.1	1.20% (68th)	—	no fix	2017-06-13	= 8.1(7)er1
CVE-2013-1113US	medium4.3	1.16% (67th)	—	no fix	2013-01-31	—
CVE-2014-2104US	medium4.3	1.15% (67th)	—	no fix	2014-03-02	= 9.0(.1)
CVE-2017-12302US	medium4.3	1.13% (66th)	—	no fix	2017-11-16	4 versions
CVE-2013-3418US	medium6.8	1.06% (64th)	—	no fix	2013-07-11	—
CVE-2013-5517US	medium5.5	1.04% (64th)	—	no fix	2013-10-02	—
CVE-2013-1132US	medium4.3	0.94% (61st)	—	no fix	2013-07-10	—
CVE-2013-1227US	medium4.3	0.94% (61st)	—	no fix	2013-04-29	—
CVE-2016-1354US	medium6.1	0.77% (56th)	—	no fix	2016-03-03	3 versions
CVE-2018-0364US	high8.8	0.71% (53rd)	—	no fix	2018-06-21	—
CVE-2019-15968US	medium5.4	0.63% (50th)	—	no fix	2019-11-26	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2648 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')6 CVEs
CWE-399CWE-3994 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-255CWE-2552 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE41 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan