Cisco Cisco Unified Communications Manager IM and Presence Service
23 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76481 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities | HIGH 7.5 | 0.5 % | ||
| CVE-2026-76479 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities | HIGH 7.8 | 0.2 % | ||
| CVE-2026-76478 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities | HIGH 8.8 | 0.1 % | ||
| CVE-2026-76476 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76477 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities | HIGH 8.8 | 0.5 % | ||
| CVE-2026-76475 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities | CRITICAL 9.3 | 0.3 % | ||
| CVE-2026-76474 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-76473 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-20045 | 12.5(1) ; 12.5(1)SU1 ; 12.5(1)SU2 ; … | Cisco Unified Communications Products Remote Code Execution Vulnerability | CRITICAL 9.8 | 4.5 % | KEV | |
| CVE-2025-20330 | 12.5(1) ; 12.5(1)SU1 ; 12.5(1)SU2 ; … | Cisco Unified Communications Manager IM and Presence Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-20278 | 12.5(1) ; 12.5(1)SU1 ; 12.5(1)SU2 ; … | Cisco Unified Communications Products Command Injection Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20112 | | Cisco Unified Communications Products Privilege Escalation Vulnerability | MEDIUM 5.1 | 0.1 % | ||
| CVE-2020-3532 | N/A | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.5 % | ||
| CVE-2024-20457 | 11.5(1)SU6 ; 10.5(1)SU1 ; 10.5(1)SU2 ; … | Cisco Unified Communications Manager IM & Presence Service Information Disclosure Vulnerability | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-20310 | 10.5(1) ; 10.5(2) ; 10.5(2a) ; … | A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an un | MEDIUM 6.1 | 0.5 % | ||
| CVE-2024-20253 | 10.5(1) ; 10.5(2) ; 10.5(2a) ; … | A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attack | CRITICAL 10.0 | 2.4 % | ||
| CVE-2023-20259 | 12.5(1)SU7 ; 14SU3 | A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to caus | HIGH 8.6 | 0.8 % | ||
| CVE-2023-20242 | N/A | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Managem | MEDIUM 6.1 | 0.5 % | ||
| CVE-2023-20108 | 10.5(1) ; 10.5(2) ; 10.5(2a) ; … | A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P | HIGH 7.5 | 0.9 % | ||
| CVE-2022-20786 | n/a | Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability | HIGH 8.1 | 0.8 % | ||
| CVE-2021-1363 | n/a | Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities | HIGH 8.1 | 1.1 % | ||
| CVE-2021-1365 | n/a | Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities | HIGH 8.1 | 1.1 % | ||
| CVE-2020-27121 | n/a | Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability | MEDIUM 6.5 | 1.2 % |