Unified customer voice portal

This hub aggregates every CVE we track for Unified customer voice portal, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Unified customer voice portal.

• CVE-2021-44228Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsKEV10.0Dec 10, 2021
• CVE-2021-1599Cisco Unified Customer Voice Portal Cross-Site Scripting Vulnerability5.4Jul 22, 2021
• CVE-2019-16017Cisco Unified Customer Voice Portal Insecure Direct Object Reference Vulnerability6.8Sep 23, 2020
• CVE-2020-3402Cisco Unified Customer Voice Portal Information Disclosure Vulnerability7.5Jul 2, 2020
• CVE-2018-0139A vulnerability in the Interactive Voice Response (IVR) management connection interface for Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to cause the IV...8.6Feb 22, 2018
• CVE-2018-0086A vulnerability in the application server of the Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affect...8.6Jan 18, 2018
• CVE-2017-12214A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, re...8.8Sep 21, 2017
• CVE-2015-0735Cross-site request forgery (CSRF) vulnerability in Cisco Unified Customer Voice Portal (CVP) 10.5(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut93970.6.8May 17, 2015
• CVE-2014-3325Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs C...4.3Jul 19, 2014
• CVE-2013-1225Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager (1) HTTP or (2) HTTPS request containing an external ent...7.8May 9, 2013
• CVE-2013-1224Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted...7.8May 9, 2013
• CVE-2013-1223The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files vi...7.8May 9, 2013
• CVE-2013-1222The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to launch arb...7.8May 9, 2013
• CVE-2013-1221The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to execute ar...10.0May 9, 2013
• CVE-2013-1220The CallServer component in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to cause a denial of service (call-acceptance outage) via malformed SIP INV...7.8May 9, 2013