Emergency responder

This hub aggregates every CVE we track for Emergency responder, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Emergency responder.

• CVE-2024-20352A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which could allow the attacker to perform arbitrary actions on an...4.9Apr 3, 2024
• CVE-2024-20347A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perform arbitrary actions on an affected dev...4.3Apr 3, 2024
• CVE-2023-20259A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the ...8.6Oct 4, 2023
• CVE-2023-20101A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that canno...9.8Oct 4, 2023
• CVE-2023-20266A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Co...6.5Aug 30, 2023
• CVE-2021-44228Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsKEV10.0Dec 10, 2021
• CVE-2021-1226Cisco Unified Communications Products Information Disclosure Vulnerability4.3Jan 13, 2021
• CVE-2019-16025Cisco Emergency Responder Stored Cross-Site Scripting Vulnerability4.8Sep 23, 2020
• CVE-2018-15403Multiple Cisco Unified Communications Products Open Redirect Vulnerability5.4Oct 5, 2018
• CVE-2017-6779Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to...7.5Jun 7, 2018
• CVE-2017-12337A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthor...9.8Nov 16, 2017
• CVE-2017-12227A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a fail...5.4Sep 7, 2017
• CVE-2016-9208A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files...6.5Dec 14, 2016
• CVE-2016-6468A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform ...8.8Dec 14, 2016
• CVE-2015-6405Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv26501.6.8Dec 13, 2015