Advisories · Technology

Cisco Unified Communications Manager.

Every CVE that names Cisco Unified Communications Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76419 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 4 Nov 2026
CVE-2026-76481 CVE record

CVSS 7.5 High

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- CWE-703
Not analysed yet 21 Oct 2026
CVE-2026-76487 CVE record

CVSS 5.3 Medium

Cisco Unified Communications Manager Improper Access Control Vulnerability
- Cisco Unified Communications Manager
- CWE-749
Not analysed yet 21 Oct 2026
CVE-2026-76479 CVE record

CVSS 7.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 21 Oct 2026
CVE-2026-76478 CVE record

CVSS 8.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-76476 CVE record

CVSS 8.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- CWE-20
Not analysed yet 21 Oct 2026
CVE-2026-76477 CVE record

CVSS 8.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- SQL injection
Not analysed yet 21 Oct 2026
CVE-2026-76475 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 21 Oct 2026
CVE-2026-76474 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Authentication bypass
Not analysed yet 21 Oct 2026
CVE-2026-76473 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Other injection
Not analysed yet 21 Oct 2026
CVE-2026-20230 CVE record

CVSS 8.6 HighCritical · KEV, CVSS 7+ and EPSSKEV

Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
- Cisco Unified Communications Manager
- Server-side request forgery (SSRF)
Not analysed yet 3 Jun 2026
CVE-2026-20045 CVE record

CVSS 8.2 HighCritical · KEVKEV

Cisco Unified Communications Products Remote Code Execution Vulnerability
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager IM and Presence Service
- Code injection
Not analysed yet 21 Jan 2026
CVE-2025-20361 CVE record

CVSS 4.8 Medium

Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 1 Oct 2025
CVE-2025-20326 CVE record

CVSS 4.3 Medium

Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability
- Cisco Unified Communications Manager
- Cross-site request forgery (CSRF)
Not analysed yet 3 Sept 2025
CVE-2025-20309 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Cisco Unified Communications Manager Static SSH Credentials Vulnerability
- Cisco Unified Communications Manager
- Hard-coded credentials
Not analysed yet 2 Jul 2025
CVE-2025-20278 CVE record

CVSS 6.0 Medium

Cisco Unified Communications Products Command Injection Vulnerability
- Cisco Finesse
- Cisco SocialMiner
- Command injection
Not analysed yet 4 Jun 2025
CVE-2025-20112 CVE record

CVSS 5.1 Medium

Cisco Unified Communications Products Privilege Escalation Vulnerability
- Cisco Emergency Responder
- Cisco Finesse
- Privilege escalation
Not analysed yet 21 May 2025
CVE-2020-3420 CVE record

CVSS 5.4 Medium

Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 18 Nov 2024
CVE-2020-3532 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerability
- Cisco Unity Connection
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 18 Nov 2024
CVE-2024-20511 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2024
CVE-2024-20488 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 21 Aug 2024
CVE-2024-20375 CVE record

CVSS 8.6 High

Out-of-bounds write in Cisco Unified Communications Manager
- Cisco Unified Communications Manager
- Memory corruption
Not analysed yet 21 Aug 2024
CVE-2024-20253 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unity Connection
- Insecure deserialization
Not analysed yet 26 Jan 2024
CVE-2023-20259 CVE record

CVSS 8.6 High

Uncontrolled resource consumption in Cisco Emergency Responder and others
- Cisco Emergency Responder
- Cisco Unity Connection
- Denial of service
Not analysed yet 4 Oct 2023
CVE-2023-20266 CVE record

CVSS 6.5 Medium

Improper signature verification in Cisco Emergency Responder and others
- Cisco Emergency Responder
- Cisco Unity Connection
- Weak cryptography or TLS
Not analysed yet 30 Aug 2023
CVE-2023-20211 CVE record

CVSS 8.1 High

SQL injection in Cisco Unified Communications Manager and others
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager / Cisco Unity Connection
- SQL injection
Not analysed yet 16 Aug 2023
CVE-2023-20242 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Unified Communications Manager and others
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager IM and Presence Service
- Cross-site scripting (XSS)
Not analysed yet 16 Aug 2023
CVE-2023-20116 CVE record

CVSS 6.8 Medium

Infinite loop in Cisco Unified Communications Manager and others
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager / Cisco Unity Connection
- Denial of service
Not analysed yet 28 Jun 2023
CVE-2023-20010 CVE record

CVSS 8.1 High

SQL injection in Cisco Unified Communications Manager
- Cisco Unified Communications Manager
- SQL injection
Not analysed yet 19 Jan 2023
CVE-2022-20816 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 10 Aug 2022
CVE-2022-20862 CVE record

CVSS 4.3 Medium

Cisco Unified Communications Manager Arbitrary File Read Vulnerability
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 6 Jul 2022
CVE-2022-20859 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Products Access Control Vulnerability
- Cisco Unified Communications Manager
- Broken access control
Not analysed yet 6 Jul 2022
CVE-2022-20815 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 6 Jul 2022
CVE-2022-20791 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Products Arbitrary File Read Vulnerability
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 6 Jul 2022
CVE-2022-20752 CVE record

CVSS 5.3 Medium

Cisco Unified Communications Products Timing Attack Vulnerability
- Cisco Unified Communications Manager
- CWE-208
Not analysed yet 6 Jul 2022
CVE-2022-20804 CVE record

CVSS 5.3 Medium

Cisco Unified Communications Products Denial of Service Vulnerability
- Cisco Unified Communications Manager
- CWE-754
Not analysed yet 21 Apr 2022
CVE-2022-20790 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Products Arbitrary File Read Vulnerability
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 21 Apr 2022
CVE-2022-20789 CVE record

CVSS 4.9 Medium

Cisco Unified Communications Products Arbitrary File Write Vulnerability
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 21 Apr 2022
CVE-2022-20788 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 21 Apr 2022
CVE-2022-20787 CVE record

CVSS 5.7 Medium

Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability
- Cisco Unified Communications Manager
- Cross-site request forgery (CSRF)
Not analysed yet 21 Apr 2022
CVE-2021-34773 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability
- Cisco Unified Communications Manager
- Cross-site request forgery (CSRF)
Not analysed yet 4 Nov 2021
CVE-2021-1478 CVE record

CVSS 5.3 Medium

Cisco Unified Communications Manager Denial of Service Vulnerability
- Cisco Unified Communications Manager
- Broken access control
Not analysed yet 6 May 2021
CVE-2021-1406 CVE record

CVSS 4.9 Medium

Cisco Unified Communications Manager Information Disclosure Vulnerability
- Cisco Unified Communications Manager
- Information disclosure
Not analysed yet 8 Apr 2021
CVE-2021-1399 CVE record

CVSS 4.3 Medium

Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability
- Cisco Unified Communications Manager
- CWE-302
Not analysed yet 8 Apr 2021
CVE-2021-1355 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Products Vulnerabilities
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 20 Jan 2021
CVE-2021-1357 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Products Vulnerabilities
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 20 Jan 2021
CVE-2021-1364 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Products Vulnerabilities
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 20 Jan 2021
CVE-2021-1282 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Products Vulnerabilities
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 20 Jan 2021
CVE-2020-3135 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability
- Cisco Unified Communications Manager
- Cross-site request forgery (CSRF)
Not analysed yet 23 Sept 2020
CVE-2020-3346 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 17 Aug 2020
CVE-2020-3177 CVE record

CVSS 7.5 High

Cisco Unified Communications Manager Path Traversal Vulnerability
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 15 Apr 2020
CVE-2015-0749 CVE record

CVSS 4.3 Medium

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 19 Feb 2020
CVE-2019-15972 CVE record

CVSS 5.4 Medium

Cisco Unified Communications Manager SQL Injection Vulnerability
- Cisco Unified Communications Manager
- SQL injection
Not analysed yet 26 Nov 2019
CVE-2019-1915 CVE record

CVSS 6.5 Medium

Multiple Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability
- Cisco Unified Communications Manager
- Cross-site request forgery (CSRF)
Not analysed yet 2 Oct 2019
CVE-2019-15272 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Manager Security Bypass Vulnerability
- Cisco Unified Communications Manager
- CWE-264
Not analysed yet 2 Oct 2019
CVE-2019-12716 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 2 Oct 2019
CVE-2019-12715 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 2 Oct 2019
CVE-2019-12711 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Manager XML External Expansion Vulnerability
- Cisco Unified Communications Manager
- XML external entities (XXE)
Not analysed yet 2 Oct 2019
CVE-2019-12710 CVE record

CVSS 4.9 Medium

Cisco Unified Communications Manager SQL Injection Vulnerability
- Cisco Unified Communications Manager
- SQL injection
Not analysed yet 2 Oct 2019
CVE-2019-1887 CVE record

CVSS 8.6 High

Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability
- Cisco Unified Communications Manager
- Memory corruption
Not analysed yet 6 Jul 2019