CVE-2015-6425

Cisco Unified Communications Manager 10.5(0.98000.88) - Denial of Service via Invalid Session Tokens

Title source: llm

Description

The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.5(0.98000.88) allows remote attackers to cause a denial of service (subsystem outage) via invalid session tokens, aka Bug ID CSCul83786.

References (3)

Core 3

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151215-ucmim

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/79275

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034431

Scores

EPSS 0.0237

EPSS Percentile 82.0%

Details

CWE

CWE-399

Status published

Products (1)

cisco/unified_communications_manager 10.5\(0.98000.88\)

Published Dec 16, 2015

Tracked Since Feb 18, 2026