Advisories · Technology

Cisco Unified Communications Manager / Cisco Unity Connection.

Every CVE that names Cisco Unified Communications Manager / Cisco Unity Connection among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-3532 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerability
- Cisco Unity Connection
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 18 Nov 2024
CVE-2024-20253 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unity Connection
- Insecure deserialization
Not analysed yet 26 Jan 2024
CVE-2023-20211 CVE record

CVSS 8.1 High

SQL injection in Cisco Unified Communications Manager and others
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager / Cisco Unity Connection
- SQL injection
Not analysed yet 16 Aug 2023
CVE-2023-20242 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Unified Communications Manager and others
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager IM and Presence Service
- Cross-site scripting (XSS)
Not analysed yet 16 Aug 2023
CVE-2023-20116 CVE record

CVSS 6.8 Medium

Infinite loop in Cisco Unified Communications Manager and others
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager / Cisco Unity Connection
- Denial of service
Not analysed yet 28 Jun 2023