Unified Communications Manager Im And Presence Service
CVE-2015-4221
MEDIUM
Severity by source
AV:N/AC:L/Au:S/C:P/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
AV:N/AC:L/Au:S/C:P/I:N/A:N
Lifecycle Timeline
1DescriptionCVE.org
Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then conducting a decryption attack, aka Bug ID CSCuq46194.
AnalysisAI
Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-264. Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then conducting a decryption attack, aka Bug ID CSCuq46194. Affected products include: Cisco Unified Communications Manager Im And Presence Service.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Cisco Unified Communications Manager and related products contain a code injection vulnerability (CVE-2026-20045) that a
A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System softw
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenti
A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified C
A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (for
A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM
A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service
Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence
Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence
A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service coul
Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) S
A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today