VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Oct 2, 2019· Updated Jun 17, 2026

CVE-2019-1915

CVE-2019-1915

Description

A vulnerability in the web-based interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections by the affected software. An attacker could exploit this vulnerability by persuading a targeted user to click a malicious link. A successful exploit could allow the attacker to send arbitrary requests that could change the password of a targeted user. An attacker could then take unauthorized actions on behalf of the targeted user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Cisco Systems, Inc./Unified Communications Manager6 versions
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2.10000.5\):*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2.10000.5\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:11.5\(1.10000.6\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:12.0\(1.10000.10\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:12.5\(1.10000.22\):*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: unspecified
  • Cisco Systems, Inc./Unified Communications Manager Im And Presence Service2 versions
    cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:12.5\(1\):*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:12.5\(1\):*:*:*:*:*:*:*
    • (no CPE)
  • Cisco Systems, Inc./Unity Connection5 versions
    cpe:2.3:a:cisco:unity_connection:11.5:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:cisco:unity_connection:11.5:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:12.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:12.5:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:14.0:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.