Cisco Cisco Unified Communications Manager
61 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76481 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities | HIGH 7.5 | 0.5 % | ||
| CVE-2026-76487 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Manager Improper Access Control Vulnerability | MEDIUM 5.3 | 0.6 % | ||
| CVE-2026-76479 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities | HIGH 7.8 | 0.2 % | ||
| CVE-2026-76478 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities | HIGH 8.8 | 0.1 % | ||
| CVE-2026-76476 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76477 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities | HIGH 8.8 | 0.5 % | ||
| CVE-2026-76475 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities | CRITICAL 9.3 | 0.3 % | ||
| CVE-2026-76474 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-76473 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-20230 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability | HIGH 8.6 | 89 % | KEV | |
| CVE-2026-20045 | 12.5(1)SU2 ; 12.5(1)SU1 ; 12.5(1) ; … | Cisco Unified Communications Products Remote Code Execution Vulnerability | CRITICAL 9.8 | 4.5 % | KEV | |
| CVE-2025-20361 | 12.5(1)SU2 ; 12.5(1)SU1 ; 12.5(1) ; … | Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-20326 | 12.5(1)SU2 ; 12.5(1)SU1 ; 12.5(1) ; … | Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability | HIGH 8.8 | 0.2 % | ||
| CVE-2025-20309 | 15.0.1.13010-1 ; 15.0.1.13011-1 ; 15.0.1.13012-1 ; … | Cisco Unified Communications Manager Static SSH Credentials Vulnerability | CRITICAL 10.0 | 1.2 % | ||
| CVE-2025-20278 | 12.5(1)SU2 ; 12.5(1)SU1 ; 12.5(1) ; … | Cisco Unified Communications Products Command Injection Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20112 | 12.5(1)SU2 ; 12.5(1)SU1 ; 12.5(1) ; … | Cisco Unified Communications Products Privilege Escalation Vulnerability | MEDIUM 5.1 | 0.1 % | ||
| CVE-2020-3420 | N/A | Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability | MEDIUM 5.4 | 0.4 % | ||
| CVE-2020-3532 | N/A | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.5 % | ||
| CVE-2024-20511 | 12.5(1)SU2 ; 12.0(1)SU2 ; 12.0(1)SU3 ; … | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.3 % | ||
| CVE-2024-20488 | 12.5(1)SU2 ; 12.0(1)SU2 ; 12.0(1)SU3 ; … | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.4 % | ||
| CVE-2024-20375 | 12.0(1)SU1 ; 12.0(1)SU2 ; 12.0(1)SU3 ; … | A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Ma | HIGH 8.6 | 0.7 % | ||
| CVE-2024-20253 | 12.0(1)SU1 ; 12.0(1)SU2 ; 12.0(1)SU3 ; … | A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attack | CRITICAL 10.0 | 2.4 % | ||
| CVE-2023-20259 | 12.5(1)SU7 ; 12.5(1)SU7a ; 14SU3 | A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to caus | HIGH 8.6 | 0.8 % | ||
| CVE-2023-20266 | 12.5(1)SU8 | A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Sessio | HIGH 7.2 | 0.5 % | ||
| CVE-2023-20211 | 12.0(1)SU1 ; 12.0(1)SU2 ; 12.0(1)SU3 ; … | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications | HIGH 8.8 | 1.0 % | ||
| CVE-2023-20242 | 12.0(1)SU1 ; 12.0(1)SU2 ; 12.0(1)SU3 ; … | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Managem | MEDIUM 6.1 | 0.5 % | ||
| CVE-2023-20116 | 12.0(1)SU1 ; 12.0(1)SU2 ; 12.0(1)SU3 ; … | A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Commu | MEDIUM 6.8 | 0.7 % | ||
| CVE-2023-20010 | 12.0(1)SU1 ; 12.0(1)SU2 ; 12.0(1)SU3 ; … | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications | HIGH 8.8 | 0.9 % | ||
| CVE-2022-20816 | n/a | Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability | HIGH 8.1 | 1.3 % | ||
| CVE-2022-20862 | n/a | Cisco Unified Communications Manager Arbitrary File Read Vulnerability | MEDIUM 4.3 | 1.5 % | ||
| CVE-2022-20859 | n/a | Cisco Unified Communications Products Access Control Vulnerability | HIGH 8.8 | 1.3 % | ||
| CVE-2022-20815 | n/a | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.8 % | ||
| CVE-2022-20791 | n/a | Cisco Unified Communications Products Arbitrary File Read Vulnerability | MEDIUM 6.5 | 1.5 % | ||
| CVE-2022-20752 | n/a | Cisco Unified Communications Products Timing Attack Vulnerability | MEDIUM 5.3 | 1.0 % | ||
| CVE-2022-20804 | n/a | Cisco Unified Communications Products Denial of Service Vulnerability | MEDIUM 6.5 | 0.4 % | ||
| CVE-2022-20790 | n/a | Cisco Unified Communications Products Arbitrary File Read Vulnerability | MEDIUM 6.5 | 1.9 % | ||
| CVE-2022-20789 | n/a | Cisco Unified Communications Products Arbitrary File Write Vulnerability | MEDIUM 6.5 | 1.4 % | ||
| CVE-2022-20788 | n/a | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.8 % | ||
| CVE-2022-20787 | n/a | Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | MEDIUM 6.8 | 0.5 % | ||
| CVE-2021-34773 | n/a | Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | MEDIUM 6.5 | 0.5 % | ||
| CVE-2021-1478 | n/a | Cisco Unified Communications Manager Denial of Service Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2021-1406 | n/a | Cisco Unified Communications Manager Information Disclosure Vulnerability | MEDIUM 4.9 | 1.1 % | ||
| CVE-2021-1399 | n/a | Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability | MEDIUM 4.3 | 0.6 % | ||
| CVE-2021-1355 | n/a | Cisco Unified Communications Products Vulnerabilities | MEDIUM 6.5 | 1.4 % | ||
| CVE-2021-1357 | n/a | Cisco Unified Communications Products Vulnerabilities | MEDIUM 6.5 | 1.4 % | ||
| CVE-2021-1364 | n/a | Cisco Unified Communications Products Vulnerabilities | MEDIUM 6.5 | 1.4 % | ||
| CVE-2021-1282 | n/a | Cisco Unified Communications Products Vulnerabilities | MEDIUM 6.5 | 1.4 % | ||
| CVE-2020-3135 | n/a | Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability | HIGH 8.8 | 0.5 % | ||
| CVE-2020-3346 | n/a | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.8 % | ||
| CVE-2020-3177 | n/a | Cisco Unified Communications Manager Path Traversal Vulnerability | HIGH 7.5 | 2.8 % | ||
| CVE-2015-0749 | next of 11.5(0.98000.108) – < unspecified | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.8 % | ||
| CVE-2019-15972 | unspecified – < n/a | Cisco Unified Communications Manager SQL Injection Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2019-1915 | unspecified – < n/a | Multiple Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | MEDIUM 6.5 | 0.7 % | ||
| CVE-2019-15272 | unspecified – < n/a | Cisco Unified Communications Manager Security Bypass Vulnerability | MEDIUM 6.5 | 1.3 % | ||
| CVE-2019-12716 | unspecified – < n/a | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 1.1 % | ||
| CVE-2019-12715 | unspecified – < n/a | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 1.1 % | ||
| CVE-2019-12711 | unspecified – < n/a | Cisco Unified Communications Manager XML External Expansion Vulnerability | MEDIUM 6.5 | 1.1 % | ||
| CVE-2019-12710 | unspecified – < n/a | Cisco Unified Communications Manager SQL Injection Vulnerability | MEDIUM 4.9 | 1.5 % | ||
| CVE-2019-1887 | unspecified – < 12.0(1)SU3 | Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability | HIGH 8.6 | 1.8 % | ||
| CVE-2019-1837 | 10.5 ; 11.5 ; 12.0 ; … | Cisco Unified Communications Manager Denial of Service Vulnerability | HIGH 7.5 | 2.4 % | ||
| CVE-2018-0474 | n/a | Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability | HIGH 8.8 | 1.5 % |