CVE-2019-1837

A vulnerability in the User Data Services (UDS) API of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the management GUI. The vulnerability is due to improper validation of input parameters in the UDS API requests. An attacker could exploit this vulnerability by sending a crafted request to the UDS API of an affected device. A successful exploit could allow the attacker to make the A Cisco DB service quit unexpectedly, preventing admin access to the Unified CM management GUI. Manual intervention may be required to restore normal operation. Software versions 10.5, 11.5, 12.0, 12.5 are affected.

• CWE-129
• CWE-20

• http://www.securityfocus.com/bid/108019Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-ucm-dosVendor Advisory
• http://www.securityfocus.com/bid/108019Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-ucm-dosVendor Advisory

Published

Apr 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18364In JetBrains TeamCity before 2019.1.4, insecure Java Deseria…9.8
• CVE-2019-18365In JetBrains TeamCity before 2019.1.4, reverse tabnabbing wa…4.3
• CVE-2019-18366In JetBrains TeamCity before 2019.1.2, secure values could b…5.3
• CVE-2019-18367In JetBrains TeamCity before 2019.1.2, a non-destructive ope…5.3
• CVE-2019-18368In JetBrains Toolbox App before 1.15.5666 for Windows, privi…7.3
• CVE-2019-18369In JetBrains YouTrack before 2019.2.55152, removing tags fro…5.3
• CVE-2019-18370An issue was discovered on Xiaomi Mi WiFi R3G devices before…9.8
• CVE-2019-18371An issue was discovered on Xiaomi Mi WiFi R3G devices before…7.5
• CVE-2019-18372Symantec Endpoint Protection, prior to 14.2 RU2, may be susc…7.8
• CVE-2019-18373Norton App Lock, prior to 1.4.0.503, may be susceptible to a…5.6
• CVE-2019-18374Symantec Critical System Protection (CSP), versions 8.0, 8.0…9.8
• CVE-2019-18375The ASG and ProxySG management consoles are susceptible to a…6.5