Config Toolbox

Cisco announced 6 high level vulnerabilities for ISE in the past week.

Security Advisories To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Cisco announced a high severity vulnerability on 1/18/23 (CVE-2023-20010) - Cisco Unified Communications Manager SQL Injection Vulnerability. Cisco has a software fix available.

Cisco Security Advisory: Cisco Unified Communications Manager SQL Injection Vulnerability A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This v...