Advisories · Technology

Cisco Unified Communications Manager IM and Presence Service.

Every CVE that names Cisco Unified Communications Manager IM and Presence Service among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76481 CVE record

CVSS 7.5 High

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- CWE-703
Not analysed yet 21 Oct 2026
CVE-2026-76479 CVE record

CVSS 7.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 21 Oct 2026
CVE-2026-76478 CVE record

CVSS 8.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-76476 CVE record

CVSS 8.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- CWE-20
Not analysed yet 21 Oct 2026
CVE-2026-76477 CVE record

CVSS 8.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- SQL injection
Not analysed yet 21 Oct 2026
CVE-2026-76475 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 21 Oct 2026
CVE-2026-76474 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Authentication bypass
Not analysed yet 21 Oct 2026
CVE-2026-76473 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Other injection
Not analysed yet 21 Oct 2026
CVE-2026-20045 CVE record

CVSS 8.2 HighCritical · KEVKEV

Cisco Unified Communications Products Remote Code Execution Vulnerability
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager IM and Presence Service
- Code injection
Not analysed yet 21 Jan 2026
CVE-2025-20330 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Manager IM and Presence Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager IM and Presence Service
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2025
CVE-2025-20278 CVE record

CVSS 6.0 Medium

Cisco Unified Communications Products Command Injection Vulnerability
- Cisco Finesse
- Cisco SocialMiner
- Command injection
Not analysed yet 4 Jun 2025
CVE-2025-20112 CVE record

CVSS 5.1 Medium

Cisco Unified Communications Products Privilege Escalation Vulnerability
- Cisco Emergency Responder
- Cisco Finesse
- Privilege escalation
Not analysed yet 21 May 2025
CVE-2020-3532 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerability
- Cisco Unity Connection
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 18 Nov 2024
CVE-2024-20457 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Manager IM & Presence Service Information Disclosure Vulnerability
- Cisco Unified Communications Manager IM and Presence Service
- Information disclosure
Not analysed yet 6 Nov 2024
CVE-2024-20310 CVE record

CVSS 6.1 Medium

Path traversal in Cisco IOS XE Software and others
- Cisco IOS XE Software
- Cisco Unified Communications Manager IM and Presence Service
- Path traversal
Not analysed yet 3 Apr 2024
CVE-2024-20253 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unity Connection
- Insecure deserialization
Not analysed yet 26 Jan 2024
CVE-2023-20259 CVE record

CVSS 8.6 High

Uncontrolled resource consumption in Cisco Emergency Responder and others
- Cisco Emergency Responder
- Cisco Unity Connection
- Denial of service
Not analysed yet 4 Oct 2023
CVE-2023-20242 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Unified Communications Manager and others
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager IM and Presence Service
- Cross-site scripting (XSS)
Not analysed yet 16 Aug 2023
CVE-2023-20108 CVE record

CVSS 7.5 High

A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to cause…
- Cisco Unified Communications Manager IM and Presence Service
- Denial of service
Not analysed yet 28 Jun 2023
CVE-2022-20786 CVE record

CVSS 5.4 Medium

Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability
- Cisco Unified Communications Manager IM and Presence Service
- SQL injection
Not analysed yet 21 Apr 2022
CVE-2021-1363 CVE record

CVSS 7.1 High

Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
- Cisco Unified Communications Manager IM and Presence Service
- SQL injection
Not analysed yet 6 May 2021
CVE-2021-1365 CVE record

CVSS 7.1 High

Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
- Cisco Unified Communications Manager IM and Presence Service
- SQL injection
Not analysed yet 6 May 2021
CVE-2020-27121 CVE record

CVSS 4.3 Medium

Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability
- Cisco Unified Communications Manager IM and Presence Service
- CWE-248
Not analysed yet 6 Nov 2020