CVE-2007-0198
Last modified
CVE-2007-0198 is a vulnerability of currently unknown severity. The JTapi Gateway process in Cisco Unified Contact Center Enterprise, Unified Contact Center Hosted, IP Contact Center Enterprise, and Cisco IP Contact Center Hosted 5.0 through 7.1 allows remote attackers to cause a denial of service (repeated process restart) via a certain TCP session on the JTapi server port.. EPSS estimates a 1.65% chance of exploitation in the next 30 days.
Description
The JTapi Gateway process in Cisco Unified Contact Center Enterprise, Unified Contact Center Hosted, IP Contact Center Enterprise, and Cisco IP Contact Center Hosted 5.0 through 7.1 allows remote attackers to cause a denial of service (repeated process restart) via a certain TCP session on the JTapi server port.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ip Contact Center Enterprise | <= 7.1 |
| Cisco | Ip Contact Center Enterprise | 5.0 |
| Cisco | Ip Contact Center Hosted | <= 7.1 |
| Cisco | Ip Contact Center Hosted | 5.0 |
| Cisco | Unified Contact Center Enterprise | <= 7.1 |
| Cisco | Unified Contact Center Enterprise | 5.0 |
| Cisco | Unified Contact Center Hosted | <= 7.1 |
| Cisco | Unified Contact Center Hosted | 5.0 |
References
- http://www.cisco.com/warp/public/707/cisco-sa-20070110-jtapi.shtmlPatch, Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20070110-jtapi.shtmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0198?
How severe is CVE-2007-0198?
How do I fix CVE-2007-0198?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0192Cross-site request forgery (CSRF) vulnerability in the save_…
- CVE-2007-0193FON La Fonera routers do not properly limit DNS service acce…
- CVE-2007-0194admin.php in MKPortal M1.1 RC1 allows remote attackers to ob…
- CVE-2007-0195my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 …
- CVE-2007-0196SQL injection vulnerability in admin_check_user.asp in Motio…
- CVE-2007-0197Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted …
- CVE-2007-0199The Data-link Switching (DLSw) feature in Cisco IOS 11.0 thr…
- CVE-2007-0200PHP remote file inclusion vulnerability in template.php in G…
- CVE-2007-0201Buffer overflow in the cmd_usr function in ftp-gw in TIS Int…
- CVE-2007-0202SQL injection vulnerability in index.php in @lex Guestbook 4…
- CVE-2007-0203Multiple unspecified vulnerabilities in phpMyAdmin before 2.…
- CVE-2007-0204Multiple cross-site scripting (XSS) vulnerabilities in phpMy…
Are you affected by CVE-2007-0198?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST