Unified Web And E-mail Interaction Manager vulnerabilities

Product

Unified Web And E-mail Interaction Manager

by Cisco · last CVE Dec 14, 2015

CVEs

On KEV

–

Max CVSS

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 0Medium 0Low 0

Severity

All severities9 Critical0 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unified Web And E-mail Interaction Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-6416	–	2%	Dec 14	Cross-site scripting (XSS) vulnerability in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.0(1) allows remote attackers to inject arbitrary web… Affected: 11.0(1)
CVE-2015-6255	–	2%	Aug 19	Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via a crafted… Affected: 9.0(2)
CVE-2015-4299	–	2%	Aug 19	Cisco Unified Web and E-Mail Interaction Manager 9.0(2) improperly performs authorization, which allows remote authenticated users to remove default messaging-queue system folders… Affected: 9.0(2)
CVE-2015-4298	–	2%	Aug 19	Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs authorization, which allows remote authenticated users to read or write to stored data via… Affected: 9.0(2); 11.0(1)
CVE-2015-0753	–	2%	May 29	SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL… Affected: 9.0(2)
CVE-2015-0655	–	2%	Feb 28	Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web… Affected: All versions, or not specified
CVE-2014-2194	–	1%	May 20	system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external… Affected: 9.0(2)
CVE-2014-2193	–	1%	May 20	Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid… Affected: All versions, or not specified
CVE-2014-2192	–	1%	May 20	Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via an… Affected: 9.0(2)