CVE-2018-0105

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. An exploit could allow the attacker to view data library information. Cisco Bug IDs: CSCvf20269.

• CWE-200
• CWE-425

• http://www.securityfocus.com/bid/102725Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040245Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-ucmVendor Advisory
• http://www.securityfocus.com/bid/102725Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040245Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-ucmVendor Advisory

Published

Jan 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0099A vulnerability in the web management GUI of the Cisco D9800…
• CVE-2018-0100A vulnerability in the Profile Editor of the Cisco AnyConnec…
• CVE-2018-0101A vulnerability in the Secure Sockets Layer (SSL) VPN functi…10
• CVE-2018-0102A vulnerability in the Pong tool of Cisco NX-OS Software cou…
• CVE-2018-0103A Buffer Overflow vulnerability in Cisco WebEx Network Recor…
• CVE-2018-0104A vulnerability in Cisco WebEx Network Recording Player for …
• CVE-2018-0106A vulnerability in the ConfD server of the Cisco Elastic Ser…3.3
• CVE-2018-0107A vulnerability in the web framework of Cisco Prime Service …
• CVE-2018-0108A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0109A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0110A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0111A vulnerability in Cisco WebEx Meetings Server could allow a…