https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 12:32:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-107779 EUVD-2026-107779 https://cve.radiocsirt.org/vuln/euvd-2026-107779 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4869 <p>Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM &amp; Presence Service in Cisco Unified Presence Server through 9.1(2) use the same CTI and database-encryption key across different customers&#39; installations, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key, aka Bug IDs CSCsc69187 and CSCui01756. NOTE: the vendor has provided a statement that the &#34;hard-coded static encryption key is considered a hardening issue rather than a vulnerability, and as such, has a CVSS score of 0/0.&#34;</p> <p>Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM &amp; Presence Service in Cisco Unified Presence Server through 9.1(2) use the same CTI and database-encryption key across different customers&#39; installations, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key, aka Bug IDs CSCsc69187 and CSCui01756. NOTE: the vendor has provided a statement that the &#34;hard-coded static encryption key is considered a hardening issue rather than a vulnerability, and as such, has a CVSS score of 0/0.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-4869 https://cve.radiocsirt.org/vuln/ghsa-563c-77qf-c6mg <p>Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM &amp; Presence Service in Cisco Unified Presence Server through 9.1(2) use the same CTI and database-encryption key across different customers&#39; installations, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key, aka Bug IDs CSCsc69187 and CSCui01756. NOTE: the vendor has provided a statement that the &#34;hard-coded static encryption key is considered a hardening issue rather than a vulnerability, and as such, has a CVSS score of 0/0.&#34;</p> <p>Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM &amp; Presence Service in Cisco Unified Presence Server through 9.1(2) use the same CTI and database-encryption key across different customers&#39; installations, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key, aka Bug IDs CSCsc69187 and CSCui01756. NOTE: the vendor has provided a statement that the &#34;hard-coded static encryption key is considered a hardening issue rather than a vulnerability, and as such, has a CVSS score of 0/0.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-563c-77qf-c6mg https://cve.radiocsirt.org/vuln/gsd-2013-4869 gsd-2013-4869 https://cve.radiocsirt.org/vuln/gsd-2013-4869