[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2caFhX1GNFVLJ0b1BBLXL_4ToFIyUm5Mqr3JG7ctwuo":3,"g5a-family:cisco\u002Funified_customer_voice_portal":192,"g5a-ex:cisco\u002Funified_customer_voice_portal@*":193},{"success":4,"data":5},true,{"product":6,"versions":78,"topVulnerabilitiesByEpss":108,"kevVulnerabilities":166,"seoMetadata":171,"meta":190},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":77},"cisco","unified_customer_voice_portal",29,16,1,"2021-12-10",[14,18,20,22,24,26,28,31,33,35,37,39,41,43,45,47,49,51,53,56,58,61,63,65,67,69,71,73,75],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"10.5",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"10.5\\(1\\)",{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},"11.0",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"11.0\\(1\\)",{"version":25,"cve_count":11,"kev_count":16,"has_kev":17},"11.5",{"version":27,"cve_count":11,"kev_count":16,"has_kev":17},"11.5\\(1\\)",{"version":29,"cve_count":30,"kev_count":11,"has_kev":4},"11.6",2,{"version":32,"cve_count":11,"kev_count":11,"has_kev":4},"11.6\\(1\\)",{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},"11.6\\(1\\)_es-11",{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},"11.6\\(2\\)",{"version":38,"cve_count":11,"kev_count":11,"has_kev":4},"12.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":4},"12.0\\(1\\)",{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},"12.0\\\\(1\\\\)",{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},"12.0\\(1\\)_es-7",{"version":46,"cve_count":11,"kev_count":11,"has_kev":4},"12.5",{"version":48,"cve_count":11,"kev_count":11,"has_kev":4},"12.5\\(1\\)",{"version":50,"cve_count":11,"kev_count":11,"has_kev":4},"12.6\\(1\\)",{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},"12.6\\\\(1\\\\)",{"version":54,"cve_count":55,"kev_count":16,"has_kev":17},"3.0",6,{"version":57,"cve_count":55,"kev_count":16,"has_kev":17},"3.6\\(10\\)",{"version":59,"cve_count":60,"kev_count":16,"has_kev":17},"4.0",7,{"version":62,"cve_count":55,"kev_count":16,"has_kev":17},"4.0\\(2\\)",{"version":64,"cve_count":60,"kev_count":16,"has_kev":17},"4.1",{"version":66,"cve_count":60,"kev_count":16,"has_kev":17},"7.0",{"version":68,"cve_count":55,"kev_count":16,"has_kev":17},"7.0\\(2\\)",{"version":70,"cve_count":55,"kev_count":16,"has_kev":17},"8.0\\(1\\)",{"version":72,"cve_count":55,"kev_count":16,"has_kev":17},"8.5\\(1\\)",{"version":74,"cve_count":55,"kev_count":16,"has_kev":17},"9.0",{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},"9.0\\(1\\)","Unified Customer Voice Portal by Cisco is a technology product with 29 tracked versions and 16 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":11,"kev_count":16,"has_kev":17},{"version":27,"cve_count":11,"kev_count":16,"has_kev":17},{"version":29,"cve_count":30,"kev_count":11,"has_kev":4},{"version":32,"cve_count":11,"kev_count":11,"has_kev":4},{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":4},{"version":40,"cve_count":11,"kev_count":11,"has_kev":4},{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},{"version":46,"cve_count":11,"kev_count":11,"has_kev":4},{"version":48,"cve_count":11,"kev_count":11,"has_kev":4},{"version":50,"cve_count":11,"kev_count":11,"has_kev":4},{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},{"version":54,"cve_count":55,"kev_count":16,"has_kev":17},{"version":57,"cve_count":55,"kev_count":16,"has_kev":17},{"version":59,"cve_count":60,"kev_count":16,"has_kev":17},{"version":62,"cve_count":55,"kev_count":16,"has_kev":17},{"version":64,"cve_count":60,"kev_count":16,"has_kev":17},{"version":66,"cve_count":60,"kev_count":16,"has_kev":17},{"version":68,"cve_count":55,"kev_count":16,"has_kev":17},{"version":70,"cve_count":55,"kev_count":16,"has_kev":17},{"version":72,"cve_count":55,"kev_count":16,"has_kev":17},{"version":74,"cve_count":55,"kev_count":16,"has_kev":17},{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},[109,116,122,128,135,141,147,152,156,162],{"cveId":110,"description":111,"publishedDate":12,"cvssScore":112,"cvssVersion":113,"severity":114,"isKev":4,"epssScore":115},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.",10,"v3.1","Critical",0.99999,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":112,"cvssVersion":120,"severity":114,"isKev":17,"epssScore":121},"CVE-2013-1221","The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to execute arbitrary code via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38384.","2013-05-09","v2",0.03436,{"cveId":123,"description":124,"publishedDate":125,"cvssScore":126,"cvssVersion":120,"severity":114,"isKev":17,"epssScore":127},"CVE-2008-2053","Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)_ES14, 4.1.x before 4.1(1)_ES11, and 7.x before 7.0(1) allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account.","2008-05-22",9,0.02957,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":132,"cvssVersion":113,"severity":133,"isKev":17,"epssScore":134},"CVE-2018-0139","A vulnerability in the Interactive Voice Response (IVR) management connection interface for Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to cause the IVR connection to disconnect, creating a system-wide denial of service (DoS) condition. The vulnerability is due to improper handling of a TCP connection request when the IVR connection is already established. An attacker could exploit this vulnerability by initiating a crafted connection to the IP address of the targeted CVP device. An exploit could allow the attacker to disconnect the IVR to CVP connection, creating a DoS condition that prevents the CVP from accepting new, incoming calls while the IVR automatically attempts to re-establish the connection to the CVP. This vulnerability affects Cisco Unified Customer Voice Portal (CVP) Software Release 11.5(1). Cisco Bug IDs: CSCve70560.","2018-02-22",8.6,"High",0.0232,{"cveId":136,"description":137,"publishedDate":138,"cvssScore":132,"cvssVersion":139,"severity":133,"isKev":17,"epssScore":140},"CVE-2018-0086","A vulnerability in the application server of the Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to malformed SIP INVITE traffic received on the CVP during communications with the Cisco Virtualized Voice Browser (VVB). An attacker could exploit this vulnerability by sending malformed SIP INVITE traffic to the targeted appliance. An exploit could allow the attacker to impact the availability of services and data on the device, causing a DoS condition. This vulnerability affects Cisco Unified CVP running any software release prior to 11.6(1). Cisco Bug IDs: CSCve85840.","2018-01-18","v3.0",0.02297,{"cveId":142,"description":143,"publishedDate":144,"cvssScore":145,"cvssVersion":139,"severity":133,"isKev":17,"epssScore":146},"CVE-2017-12214","A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation. An attacker could exploit this vulnerability by authenticating to the OAMP and sending a crafted HTTP request. A successful exploit could allow the attacker to gain administrator privileges. The attacker must successfully authenticate to the system to exploit this vulnerability. This vulnerability affects Cisco Unified Customer Voice Portal (CVP) running software release 10.5, 11.0, or 11.5. Cisco Bug IDs: CSCve92752.","2017-09-21",8.8,0.02182,{"cveId":148,"description":149,"publishedDate":119,"cvssScore":150,"cvssVersion":120,"severity":133,"isKev":17,"epssScore":151},"CVE-2013-1224","Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369.",7.8,0.02116,{"cveId":153,"description":154,"publishedDate":119,"cvssScore":150,"cvssVersion":120,"severity":133,"isKev":17,"epssScore":155},"CVE-2013-1225","Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager (1) HTTP or (2) HTTPS request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCub38366.",0.01595,{"cveId":157,"description":158,"publishedDate":159,"cvssScore":160,"cvssVersion":113,"severity":133,"isKev":17,"epssScore":161},"CVE-2020-3402","A vulnerability in the Java Remote Method Invocation (RMI) interface of Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because certain RMI listeners are not properly authenticated. An attacker could exploit this vulnerability by sending a crafted request to the affected listener. A successful exploit could allow the attacker to access sensitive information on an affected device.","2020-07-02",7.5,0.01577,{"cveId":163,"description":164,"publishedDate":119,"cvssScore":150,"cvssVersion":120,"severity":133,"isKev":17,"epssScore":165},"CVE-2013-1223","The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.",0.01482,[167],{"cveId":110,"description":111,"publishedDate":12,"cvssScore":112,"severity":114,"isKev":4,"epssScore":115,"cisaVulnName":168,"cisaDateAdded":12,"cisaShortDescription":169,"cisaRequiredAction":170},"Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"title":172,"metaDescription":173,"keywords":174,"structuredData":175},"Unified Customer Voice Portal by Cisco - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Unified Customer Voice Portal by Cisco covering 29 versions with 16 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Unified Customer Voice Portal vulnerabilities, Unified Customer Voice Portal security, Unified Customer Voice Portal CVE, Cisco Unified Customer Voice Portal, Unified Customer Voice Portal threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Unified Customer Voice Portal KEV, Unified Customer Voice Portal exploited vulnerabilities",{"@context":176,"@type":177,"name":178,"description":173,"url":179,"manufacturer":180,"applicationCategory":184,"softwareVersion":185,"mainEntity":186},"https:\u002F\u002Fschema.org","SoftwareApplication","Unified Customer Voice Portal","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Funified_customer_voice_portal",{"@type":181,"name":182,"url":183},"Organization","Cisco","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcisco","Security Software","29 versions tracked",{"@type":187,"name":188,"description":189,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Unified Customer Voice Portal Security Vulnerabilities","Security vulnerabilities affecting Unified Customer Voice Portal by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":191,"apiVersion":54},"2026-10-28T15:39:25.721Z",[],{"rows":194,"total":11,"capped":17,"failed":16},[195],{"cveId":110,"name":168,"severity":114,"cvss":112,"added":12,"epss":115,"published":196,"ranges":197,"checked":4,"hits":202,"covers":17},"2021-12-10T10:15:09.143",[198,29,199,200,201,38,46],"before 11.6","12.0(1)","12.5(1)","12.6(1)",[]]