CVE-2015-0680: Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows r...

Security readout for executives and security teams

Cisco Unified Call Manager 9.1(2.1000.28) allowed authenticated remote users to retrieve arbitrary files because resource requests were not properly restricted. In business terms, a valid user account could expose sensitive call-management files or configuration data. The sources do not provide CVSS scoring, exploit details, or named remediation in the bundle. Exposure is most likely limited to organizations running Cisco Unified Call Manager 9.1(2.1000.28), especially where authenticated users can reach the relevant Unified CM interface. The bundle does not identify other affected versions, appliances, or cloud services. Treat this as a targeted remediation item for legacy Cisco voice infrastructure. It is not KEV-listed in the bundle, but arbitrary file read by authenticated users can expose sensitive operational data. Prioritize if affected Unified CM systems remain in use or are broadly reachable. Mitigation focus: Check Cisco advisory guidance for fixed releases or required configuration changes.; Inventory Cisco Unified Call Manager deployments and identify version 9.1(2.1000.28).; Restrict Unified CM access to trusted administrative networks and authorized users..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.