CVE-2018-0266

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables over the web interface. An attacker could exploit this vulnerability by browsing to a specific URL. An exploit could allow the attacker to view configuration parameters. Cisco Bug IDs: CSCvf20218.

• CWE-200
• CWE-425

• http://www.securityfocus.com/bid/103933Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040718Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-ucmVendor Advisory
• http://www.securityfocus.com/bid/103933Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040718Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-ucmVendor Advisory

Published

Apr 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0259A vulnerability in the web-based management interface of Cis…
• CVE-2018-0260A vulnerability in the web interface of Cisco MATE Live coul…
• CVE-2018-0262A vulnerability in Cisco Meeting Server could allow an unaut…
• CVE-2018-0263A vulnerability in Cisco Meeting Server (CMS) could allow an…7.4
• CVE-2018-0264A vulnerability in the Cisco WebEx Network Recording Player …
• CVE-2018-0265Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-0267A vulnerability in the web framework of Cisco Unified Commun…6.5
• CVE-2018-0268A vulnerability in the container management subsystem of Cis…
• CVE-2018-0269A vulnerability in the web framework of the Cisco Digital Ne…4.3
• CVE-2018-0270A vulnerability in the web-based management interface of Cis…
• CVE-2018-0271A vulnerability in the API gateway of the Cisco Digital Netw…
• CVE-2018-0272A vulnerability in the Secure Sockets Layer (SSL) Engine of …