Cisco Unified Presence — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Unified Presence, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2008-1154 — CVSS 10.0 (critical): The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager…
• CVE-2008-1158 — CVSS 7.8 (high): The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump…
• CVE-2008-1740 — CVSS 7.8 (high): The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump…
• CVE-2008-1741 — CVSS 7.8 (high): The SIP Proxy (SIPD) service in Cisco Unified Presence before 6.0(3) allows remote attackers to cause a denial of service (core dump and…
• CVE-2012-3935 — CVSS 7.8 (high): Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers…
• CVE-2013-3453 — CVSS 7.8 (high): Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and 9.x before 9.1(2), and Cisco Unified…
• CVE-2011-3288 — CVSS 7.5 (high): Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a…
• CVE-2013-1197 — CVSS 6.8 (medium): The XML parser in the server in Cisco Unified Presence (CUP) allows remote authenticated users to cause a denial of service (jabberd daemon…