CVE-2015-4221: Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to en...

Security readout for executives and security teams

This flaw affects Cisco Unified Communications Manager IM and Presence Service 9.1(1). A remote attacker could access encrypted passwords, recover cleartext passwords, and use them to run commands. The bundle does not provide CVSS, fixed-version details, or evidence of active exploitation. Exposure is likely limited to organizations still running Cisco Unified Communications Manager IM and Presence Service 9.1(1), especially where its web interface is reachable by untrusted networks or users. Treat this as high priority for any remaining Cisco IM and Presence 9.1(1) deployment because credential exposure can become command execution. Priority drops if the product is not present or has been remediated. Mitigation focus: Review Cisco advisory for fixed versions and vendor-supported remediation.; Upgrade or retire Cisco IM and Presence Service 9.1(1) where present.; Restrict web interface access to trusted administrative networks..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.