Cisco Releases Security Advisories

Cisco has released three security advisories to address vulnerabilities affecting the Cisco Unified Communications Manager (previously known as Cisco CallManager), the Cisco Unified Presence Server, and the Cisco Intercompany Media Engine. These vulnerabilities may allow  an attacker, remote attacker to disclose the contents of the underlying databases or cause a denial-of-service condition on affected product versions.

US-CERT encourages users and administrators to review the following Cisco security advisories and apply any necessary updates to help mitigate the risks.

• Cisco Unified Communications Manager Denial of Service Vulnerabilities
• Open Query Interface in Cisco Unified Communications Manager and Cisco Unified Presence Server
• Denial of Service Vulnerabilities in Cisco Intercompany Media Engine

Source: US-CERT