Cisco Cisco Emergency Responder
17 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76481 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities | HIGH 7.5 | 0.5 % | ||
| CVE-2026-76479 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities | HIGH 7.8 | 0.2 % | ||
| CVE-2026-76478 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities | HIGH 8.8 | 0.1 % | ||
| CVE-2026-76476 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76477 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities | HIGH 8.8 | 0.5 % | ||
| CVE-2026-76475 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities | CRITICAL 9.3 | 0.3 % | ||
| CVE-2026-76474 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-76473 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. | CRITICAL 9.8 | 0.5 % | ||
| CVE-2025-20112 | 12.5(1a) ; 12.5(1)SU1 ; 12.5(1) ; … | Cisco Unified Communications Products Privilege Escalation Vulnerability | MEDIUM 5.1 | 0.1 % | ||
| CVE-2024-20352 | 10.5(1a) ; 10.5(1) ; 11.5(4)SU2 ; … | A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which co | HIGH 8.8 | 1.5 % | ||
| CVE-2024-20347 | N/A | A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the | MEDIUM 6.5 | 0.2 % | ||
| CVE-2023-20259 | 12.5(1)SU7 ; 14 ; 14SU3 | A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to caus | HIGH 8.6 | 0.8 % | ||
| CVE-2023-20101 | 12.5(1)SU4 | A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root | CRITICAL 9.8 | 2.6 % | ||
| CVE-2023-20266 | 12.5(1)SU4 ; 12.5(1)SU8a ; 14SU3 | A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Sessio | HIGH 7.2 | 0.5 % | ||
| CVE-2021-1226 | n/a | Cisco Unified Communications Products Information Disclosure Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2019-16025 | n/a | Cisco Emergency Responder Stored Cross-Site Scripting Vulnerability | MEDIUM 5.5 | 0.6 % | ||
| CVE-2018-15403 | n/a | Multiple Cisco Unified Communications Products Open Redirect Vulnerability | MEDIUM 5.4 | 1.2 % |