CVE Database
/

CVE-2018-0135

Back to search

CVE-2018-0135

Published: Feb 8, 2018

Modified: Dec 2, 2024

PUBLISHED

Description

A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software improperly validates user-supplied search input. An attacker could exploit this vulnerability by sending malicious requests to an affected system. A successful exploit could allow the attacker to retrieve sensitive information from the affected system. Cisco Bug IDs: CSCvf17644.

VendorProductVersions

n/a

Cisco Unified Communications Manager

affected
Cisco Unified Communications Manager

Weaknesses (CWE)

References

102964
vdb-entry
x_refsource_BID
1040343
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now