Advisories · Technology

Cisco Unity Connection.

Every CVE that names Cisco Unity Connection among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76481 CVE record

CVSS 7.5 High

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- CWE-703
Not analysed yet 21 Oct 2026
CVE-2026-76479 CVE record

CVSS 7.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Path traversal
Not analysed yet 21 Oct 2026
CVE-2026-76478 CVE record

CVSS 8.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-76476 CVE record

CVSS 8.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- CWE-20
Not analysed yet 21 Oct 2026
CVE-2026-76477 CVE record

CVSS 8.8 High

Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- SQL injection
Not analysed yet 21 Oct 2026
CVE-2026-76475 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 21 Oct 2026
CVE-2026-76474 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Authentication bypass
Not analysed yet 21 Oct 2026
CVE-2026-76473 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Other injection
Not analysed yet 21 Oct 2026
CVE-2026-20034 CVE record

CVSS 8.8 High

Cisco Unity Connection Remote Code Execution Vulnerability
- Cisco Unity Connection
- Path traversal
Not analysed yet 6 May 2026
CVE-2026-20035 CVE record

CVSS 7.2 High

Cisco Unity Connection Server-Side Request Forgery Vulnerability
- Cisco Unity Connection
- Server-side request forgery (SSRF)
Not analysed yet 6 May 2026
CVE-2026-20059 CVE record

CVSS 6.1 Medium

Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability
- Cisco Unity Connection
- Cross-site scripting (XSS)
Not analysed yet 15 Apr 2026
CVE-2026-20061 CVE record

CVSS 4.3 Medium

Cisco Unity Connection SQL Injection Vulnerability
- Cisco Unity Connection
- SQL injection
Not analysed yet 15 Apr 2026
CVE-2026-20060 CVE record

CVSS 4.7 Medium

Cisco Unity Connection Open Redirect Vulnerability
- Cisco Unity Connection
- Open redirect
Not analysed yet 15 Apr 2026
CVE-2026-20081 CVE record

CVSS 6.5 Medium

Cisco Unity Connection Arbitrary File Download Vulnerability
- Cisco Unity Connection
- Path traversal
Not analysed yet 15 Apr 2026
CVE-2026-20078 CVE record

CVSS 6.5 Medium

Cisco Unity Connection Arbitrary File Download Vulnerability
- Cisco Unity Connection
- Path traversal
Not analysed yet 15 Apr 2026
CVE-2026-20045 CVE record

CVSS 8.2 HighCritical · KEVKEV

Cisco Unified Communications Products Remote Code Execution Vulnerability
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager IM and Presence Service
- Code injection
Not analysed yet 21 Jan 2026
CVE-2025-20278 CVE record

CVSS 6.0 Medium

Cisco Unified Communications Products Command Injection Vulnerability
- Cisco Finesse
- Cisco SocialMiner
- Command injection
Not analysed yet 4 Jun 2025
CVE-2025-20112 CVE record

CVSS 5.1 Medium

Cisco Unified Communications Products Privilege Escalation Vulnerability
- Cisco Emergency Responder
- Cisco Finesse
- Privilege escalation
Not analysed yet 21 May 2025
CVE-2020-3532 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerability
- Cisco Unity Connection
- Cisco Unified Communications Manager
- Cross-site scripting (XSS)
Not analysed yet 18 Nov 2024
CVE-2024-20253 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unity Connection
- Insecure deserialization
Not analysed yet 26 Jan 2024
CVE-2024-20305 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Unity Connection
- Cisco Unity Connection
- Cross-site scripting (XSS)
Not analysed yet 26 Jan 2024
CVE-2024-20272 CVE record

CVSS 7.3 High

Unrestricted file upload in Cisco Unity Connection
- Cisco Unity Connection
- Unrestricted file upload
Not analysed yet 17 Jan 2024
CVE-2023-20259 CVE record

CVSS 8.6 High

Uncontrolled resource consumption in Cisco Emergency Responder and others
- Cisco Emergency Responder
- Cisco Unity Connection
- Denial of service
Not analysed yet 4 Oct 2023
CVE-2023-20266 CVE record

CVSS 6.5 Medium

Improper signature verification in Cisco Emergency Responder and others
- Cisco Emergency Responder
- Cisco Unity Connection
- Weak cryptography or TLS
Not analysed yet 30 Aug 2023
CVE-2022-20800 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerability
- Cisco Unity Connection
- Cross-site scripting (XSS)
Not analysed yet 6 Jul 2022
CVE-2021-34701 CVE record

CVSS 4.3 Medium

Cisco Unified Communications Products Path Traversal Vulnerability
- Cisco Unity Connection
- Path traversal
Not analysed yet 4 Nov 2021
CVE-2021-1409 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities
- Cisco Unity Connection
- SQL injection
Not analysed yet 8 Apr 2021
CVE-2021-1408 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities
- Cisco Unity Connection
- SQL injection
Not analysed yet 8 Apr 2021
CVE-2021-1407 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities
- Cisco Unity Connection
- SQL injection
Not analysed yet 8 Apr 2021
CVE-2021-1380 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities
- Cisco Unity Connection
- SQL injection
Not analysed yet 8 Apr 2021
CVE-2021-1362 CVE record

CVSS 8.8 High

Cisco Unified Communications Products Remote Code Execution Vulnerability
- Cisco Unity Connection
- Code injection
Not analysed yet 8 Apr 2021
CVE-2019-15963 CVE record

CVSS 4.3 Medium

Cisco Unified Communications Manager Information Disclosure Vulnerability
- Cisco Unity Connection
- Information disclosure
Not analysed yet 23 Sept 2020
CVE-2020-3130 CVE record

CVSS 5.9 Medium

Cisco Unity Connection Directory Traversal Vulnerability
- Cisco Unity Connection
- Path traversal
Not analysed yet 23 Sept 2020
CVE-2020-3282 CVE record

CVSS 6.1 Medium

Cisco Unified Communications Products Cross-Site Scripting Vulnerability
- Cisco Unity Connection
- Cross-site scripting (XSS)
Not analysed yet 2 Jul 2020
CVE-2020-3129 CVE record

CVSS 4.8 Medium

Cisco Unity Connection Stored Cross-Site Scripting Vulnerability
- Cisco Unity Connection
- Cross-site scripting (XSS)
Not analysed yet 26 Jan 2020
CVE-2019-12707 CVE record

CVSS 6.1 Medium

Multiple Cisco Unified Communications Products Cross-Site Scripting Vulnerability
- Cisco Unity Connection
- Cross-site scripting (XSS)
Not analysed yet 2 Oct 2019
CVE-2019-1685 CVE record

CVSS 6.1 Medium

Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability
- Cisco Unity Connection
- Cross-site scripting (XSS)
Not analysed yet 21 Feb 2019
CVE-2018-15426 CVE record

Cisco Unity Connection Stored Cross-Site Scripting Vulnerability
- Cisco Unity Connection
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2018
CVE-2018-15396 CVE record

Cisco Unity Connection File Upload Denial of Service Vulnerability
- Cisco Unity Connection
- CWE-399
Not analysed yet 5 Oct 2018
CVE-2018-0203 CVE record

Cisco Unity Connection: A vulnerability in the SMTP relay of Cisco Unity Connection could allow an…
- Cisco Unity Connection
- CWE-19
Not analysed yet 22 Feb 2018
CVE-2017-12212 CVE record

Cross-site scripting in Cisco Unity Connection
- Cisco Unity Connection
- Cross-site scripting (XSS)
Not analysed yet 7 Sept 2017
CVE-2017-6629 CVE record

Path traversal in Cisco Unity Connection
- Cisco Unity Connection
- Path traversal
Not analysed yet 3 May 2017