Advisories · Technology

Cisco Session Initiation Protocol (SIP) Software.

Every CVE that names Cisco Session Initiation Protocol (SIP) Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-20281 CVE record

CVSS 7.5 High

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability
- Cisco Session Initiation Protocol (SIP) Software
- Denial of service
Not analysed yet 2 Sept 2026
CVE-2025-20351 CVE record

CVSS 6.1 Medium

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Cross-Site Scripting Vulnerability
- Cisco Session Initiation Protocol (SIP) Software
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2025
CVE-2025-20350 CVE record

CVSS 7.5 High

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Denial of Service Vulnerability
- Cisco Session Initiation Protocol (SIP) Software
- Memory corruption
Not analysed yet 15 Oct 2025
CVE-2025-20335 CVE record

CVSS 5.3 Medium

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Arbitrary File Write Vulnerability
- Cisco Session Initiation Protocol (SIP) Software
- Broken access control
Not analysed yet 3 Sept 2025
CVE-2025-20336 CVE record

CVSS 5.3 Medium

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Disclosure Vulnerability
- Cisco Session Initiation Protocol (SIP) Software
- Information disclosure
Not analysed yet 3 Sept 2025
CVE-2025-20158 CVE record

CVSS 4.4 Medium

Cisco Video Phone 8875 and Desk Phone 9800 Series Information Disclosure Vulnerability
- Cisco Session Initiation Protocol (SIP) Software
- Information disclosure
Not analysed yet 19 Feb 2025
CVE-2021-1379 CVE record

CVSS 6.5 Medium

Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities
- Cisco IP Phones with Multiplatform Firmware
- Cisco Session Initiation Protocol (SIP) Software
- Memory corruption
Not analysed yet 18 Nov 2024
CVE-2024-20534 CVE record

CVSS 4.8 Medium

Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability
- Cisco IP Phones with Multiplatform Firmware
- Cisco Session Initiation Protocol (SIP) Software
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2024
CVE-2024-20533 CVE record

CVSS 4.8 Medium

Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities
- Cisco IP Phones with Multiplatform Firmware
- Cisco Session Initiation Protocol (SIP) Software
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2024
CVE-2024-20445 CVE record

CVSS 5.3 Medium

Cisco IP Phone 7800, 8800, and 9800 Series Information Disclosure Vulnerability
- Cisco Session Initiation Protocol (SIP) Software
- Information disclosure
Not analysed yet 6 Nov 2024
CVE-2023-20265 CVE record

CVSS 5.5 Medium

Cross-site scripting in Cisco IP Phones with Multiplatform Firmware and others
- Cisco IP Phones with Multiplatform Firmware
- Cisco Session Initiation Protocol (SIP) Software
- Cross-site scripting (XSS)
Not analysed yet 21 Nov 2023
CVE-2023-20018 CVE record

CVSS 8.6 High

Authentication bypass in Cisco Session Initiation Protocol (SIP) Software
- Cisco Session Initiation Protocol (SIP) Software
- Authentication bypass
Not analysed yet 19 Jan 2023
CVE-2022-20968 CVE record

CVSS 8.1 High

Out-of-bounds write in Cisco Session Initiation Protocol (SIP) Software
- Cisco Session Initiation Protocol (SIP) Software
- Memory corruption
Not analysed yet 8 Dec 2022
CVE-2022-20660 CVE record

CVSS 4.6 Medium

Cisco IP Phones Information Disclosure Vulnerability
- Cisco Session Initiation Protocol (SIP) Software
- Information disclosure
Not analysed yet 14 Jan 2022