Cisco Unified Customer Voice Portal — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Unified Customer Voice Portal, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (16)

• CVE-2013-1221 — CVSS 10.0 (critical): The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure…
• CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
• CVE-2008-2053 — CVSS 9.0 (critical): Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)_ES14, 4.1.x before 4.1(1)_ES11, and 7.x before…
• CVE-2017-12214 — CVSS 8.8 (high): A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified…
• CVE-2018-0139 — CVSS 8.6 (high): A vulnerability in the Interactive Voice Response (IVR) management connection interface for Cisco Unified Customer Voice Portal (CVP) could…
• CVE-2018-0086 — CVSS 8.6 (high): A vulnerability in the application server of the Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker…
• CVE-2013-1225 — CVSS 7.8 (high): Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource…
• CVE-2013-1220 — CVSS 7.8 (high): The CallServer component in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to cause a denial…
• CVE-2013-1223 — CVSS 7.8 (high): The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified…
• CVE-2013-1224 — CVSS 7.8 (high): Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows…
• CVE-2013-1222 — CVSS 7.8 (high): The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure…
• CVE-2020-3402 — CVSS 7.5 (high): A vulnerability in the Java Remote Method Invocation (RMI) interface of Cisco Unified Customer Voice Portal (CVP) could allow an…
• CVE-2019-16017 — CVSS 6.8 (medium): A vulnerability in the Operations, Administration, Maintenance and Provisioning (OAMP) OpsConsole Server for Cisco Unified Customer Voice…
• CVE-2015-0735 — CVSS 6.8 (medium): Cross-site request forgery (CSRF) vulnerability in Cisco Unified Customer Voice Portal (CVP) 10.5(1) allows remote attackers to hijack the…
• CVE-2021-1599 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote…
• CVE-2014-3325 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers to inject arbitrary…