# Cisco Unified Communications Manager IM and Presence Service.

Every CVE that names Cisco Unified Communications Manager IM and Presence Service among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76481.md)
  `CVE-2026-76481` · CVE record: Cisco Cisco Emergency Responder and 3 more · CVSS 7.5 High · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-703
- [Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76479.md)
  `CVE-2026-76479` · CVE record: Cisco Cisco Emergency Responder and 3 more · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Path traversal
- [Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76478.md)
  `CVE-2026-76478` · CVE record: Cisco Cisco Emergency Responder and 3 more · CVSS 8.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Broken access control
- [Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76476.md)
  `CVE-2026-76476` · CVE record: Cisco Cisco Emergency Responder and 3 more · CVSS 8.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-20
- [Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76477.md)
  `CVE-2026-76477` · CVE record: Cisco Cisco Emergency Responder and 3 more · CVSS 8.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: SQL injection
- [Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76475.md)
  `CVE-2026-76475` · CVE record: Cisco Cisco Emergency Responder and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76474.md)
  `CVE-2026-76474` · CVE record: Cisco Cisco Emergency Responder and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Authentication bypass
- [Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.](https://agentprime.io/advisories/CVE-2026-76473.md)
  `CVE-2026-76473` · CVE record: Cisco Cisco Emergency Responder and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection
- [Cisco Unified Communications Products Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20045.md)
  `CVE-2026-20045` · CVE record: Cisco Cisco Unified Communications Manager and 2 more · CVSS 8.2 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 21 Jan 2026 · Tags: Code injection
- [Cisco Unified Communications Manager IM and Presence Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2025-20330.md)
  `CVE-2025-20330` · CVE record: Cisco Cisco Unified Communications Manager IM and Presence Service · CVSS 6.1 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: Cross-site scripting (XSS)
- [Cisco Unified Communications Products Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-20278.md)
  `CVE-2025-20278` · CVE record: Cisco Cisco Finesse and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 4 Jun 2025 · Tags: Command injection
- [Cisco Unified Communications Products Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-20112.md)
  `CVE-2025-20112` · CVE record: Cisco Cisco Emergency Responder and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2025 · Tags: Privilege escalation
- [Cisco Unified Communications Products Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3532.md)
  `CVE-2020-3532` · CVE record: Cisco Cisco Unity Connection and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Cisco Unified Communications Manager IM & Presence Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-20457.md)
  `CVE-2024-20457` · CVE record: Cisco Cisco Unified Communications Manager IM and Presence Service · CVSS 6.5 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Information disclosure
- [Path traversal in Cisco IOS XE Software and others](https://agentprime.io/advisories/CVE-2024-20310.md)
  `CVE-2024-20310` · CVE record: Cisco Cisco IOS XE Software and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 3 Apr 2024 · Tags: Path traversal
- [Deserialization of untrusted data in Cisco Unified Contact Center Enterprise and others](https://agentprime.io/advisories/CVE-2024-20253.md)
  `CVE-2024-20253` · CVE record: Cisco Cisco Unified Contact Center Enterprise and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jan 2024 · Tags: Insecure deserialization
- [Uncontrolled resource consumption in Cisco Emergency Responder and others](https://agentprime.io/advisories/CVE-2023-20259.md)
  `CVE-2023-20259` · CVE record: Cisco Cisco Emergency Responder and 4 more · CVSS 8.6 High · Not analysed yet · Published 4 Oct 2023 · Tags: Denial of service
- [Cross-site scripting in Cisco Unified Communications Manager and others](https://agentprime.io/advisories/CVE-2023-20242.md)
  `CVE-2023-20242` · CVE record: Cisco Cisco Unified Communications Manager and 2 more · CVSS 4.8 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: Cross-site scripting (XSS)
- [A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM \& Presence Service (Unified CM IM\&P) could allow an unauthenticated, remote attacker to cause…](https://agentprime.io/advisories/CVE-2023-20108.md)
  `CVE-2023-20108` · CVE record: Cisco Cisco Unified Communications Manager IM and Presence Service · CVSS 7.5 High · Not analysed yet · Published 28 Jun 2023 · Tags: Denial of service
- [Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2022-20786.md)
  `CVE-2022-20786` · CVE record: Cisco Cisco Unified Communications Manager IM and Presence Service · CVSS 5.4 Medium · Not analysed yet · Published 21 Apr 2022 · Tags: SQL injection
- [Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1363.md)
  `CVE-2021-1363` · CVE record: Cisco Cisco Unified Communications Manager IM and Presence Service · CVSS 7.1 High · Not analysed yet · Published 6 May 2021 · Tags: SQL injection
- [Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1365.md)
  `CVE-2021-1365` · CVE record: Cisco Cisco Unified Communications Manager IM and Presence Service · CVSS 7.1 High · Not analysed yet · Published 6 May 2021 · Tags: SQL injection
- [Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-27121.md)
  `CVE-2020-27121` · CVE record: Cisco Cisco Unified Communications Manager IM and Presence Service · CVSS 4.3 Medium · Not analysed yet · Published 6 Nov 2020 · Tags: CWE-248

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-unified-communications-manager-im-and-presence-service>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-unified-communications-manager-im-and-presence-service/>. Everything for agents: <https://agentprime.io/llms.txt>.