- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/13/2026, Cisco Unified Communications Manager recorded 10 security vulnerabilities in the last 90 days, of which 8 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Cisco Unified Communications Manager and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-76419Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityCVE-2026-76487Cisco Unified Communications Manager Improper Access Control VulnerabilityCVE-2026-76481Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions VulnerabilitiesCVE-2026-76479Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal VulnerabilitiesCVE-2026-76478Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-76419Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixNo |
| SeverityMedium |
CVE-2026-76487Cisco Unified Communications Manager Improper Access Control Vulnerability | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-76481Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-76479Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-76478Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-76477Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-76476Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-76475Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityCritical |
|---|
CVE-2026-76474Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityCritical |
|---|
CVE-2026-76473Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityCritical |
|---|
CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability | Exploitation statusKEV | FixNo | Published06/03/2026 | SeverityHigh |
|---|
CVE-2026-20045Cisco Unified Communications Products Remote Code Execution Vulnerability | Exploitation statusKEV | FixNo | Published01/21/2026 | SeverityHigh |
|---|
CVE-2025-20361Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixNo | Published10/01/2025 | SeverityMedium |
|---|
CVE-2025-20326Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability | Exploitation statusNot exploited | FixNo | Published09/03/2025 | SeverityMedium |
|---|
CVE-2025-20309Cisco Unified Communications Manager Static SSH Credentials Vulnerability | Exploitation statusNot exploited | FixNo | Published07/02/2025 | SeverityCritical |
|---|
CVE-2025-20278Cisco Unified Communications Products Command Injection Vulnerability | Exploitation statusNot exploited | FixNo | Published06/04/2025 | SeverityMedium |
|---|
CVE-2025-20112Cisco Unified Communications Products Privilege Escalation Vulnerability | Exploitation statusNot exploited | FixNo | Published05/21/2025 | SeverityMedium |
|---|
CVE-2020-3532Cisco Unified Communications Products Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixNo | Published11/18/2024 | SeverityMedium |
|---|
CVE-2020-3420Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixNo | Published11/18/2024 | SeverityMedium |
|---|
CVE-2024-20511Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixNo | Published11/06/2024 | SeverityMedium |
|---|
CVE-2024-20488Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixNo | Published08/21/2024 | SeverityMedium |
|---|
CVE-2024-20375CVE-2024-20375 | Exploitation statusNot exploited | FixNo | Published08/21/2024 | SeverityHigh |
|---|
CVE-2024-20253CVE-2024-20253 | Exploitation statusNot exploited | FixNo | Published01/26/2024 | SeverityCritical |
|---|
CVE-2023-20259CVE-2023-20259 | Exploitation statusNot confirmed | FixNo | Published10/04/2023 | SeverityHigh |
|---|
CVE-2023-20266CVE-2023-20266 | Exploitation statusNot exploited | FixNo | Published08/30/2023 | SeverityMedium |
|---|
CVE-2023-20242CVE-2023-20242 | Exploitation statusNot confirmed | FixNo | Published08/16/2023 | SeverityMedium |
|---|
CVE-2023-20211CVE-2023-20211 | Exploitation statusNot confirmed | FixNo | Published08/16/2023 | SeverityHigh |
|---|
CVE-2023-20116CVE-2023-20116 | Exploitation statusNot confirmed | FixNo | Published06/28/2023 | SeverityMedium |
|---|
CVE-2023-20010CVE-2023-20010 | Exploitation statusNot exploited | FixNo | Published01/19/2023 | SeverityHigh |
|---|
CVE-2022-20816Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability | Exploitation statusNot exploited | FixNo | Published08/10/2022 | SeverityMedium |
|---|
CVE-2022-20862Cisco Unified Communications Manager Arbitrary File Read Vulnerability | Exploitation statusNot exploited | FixNo | Published07/06/2022 | SeverityMedium |
|---|
CVE-2022-20859Cisco Unified Communications Products Access Control Vulnerability | Exploitation statusNot exploited | FixNo | Published07/06/2022 | SeverityMedium |
|---|
CVE-2022-20815Cisco Unified Communications Products Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixNo | Published07/06/2022 | SeverityMedium |
|---|
CVE-2022-20791Cisco Unified Communications Products Arbitrary File Read Vulnerability | Exploitation statusNot exploited | FixNo | Published07/06/2022 | SeverityMedium |
|---|
CVE-2022-20752Cisco Unified Communications Products Timing Attack Vulnerability | Exploitation statusNot exploited | FixNo | Published07/06/2022 | SeverityMedium |
|---|
CVE-2022-20804Cisco Unified Communications Products Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published04/21/2022 | SeverityMedium |
|---|
CVE-2022-20790Cisco Unified Communications Products Arbitrary File Read Vulnerability | Exploitation statusNot exploited | FixNo | Published04/21/2022 | SeverityMedium |
|---|
CVE-2022-20789Cisco Unified Communications Products Arbitrary File Write Vulnerability | Exploitation statusNot exploited | FixNo | Published04/21/2022 | SeverityMedium |
|---|
CVE-2022-20788Cisco Unified Communications Products Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixNo | Published04/21/2022 | SeverityMedium |
|---|
CVE-2022-20787Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | Exploitation statusNot exploited | FixNo | Published04/21/2022 | SeverityMedium |
|---|
CVE-2021-34773Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | Exploitation statusNot exploited | FixNo | Published11/04/2021 | SeverityMedium |
|---|
CVE-2021-1478Cisco Unified Communications Manager Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published05/06/2021 | SeverityMedium |
|---|
CVE-2021-1406Cisco Unified Communications Manager Information Disclosure Vulnerability | Exploitation statusNot exploited | FixNo | Published04/08/2021 | SeverityMedium |
|---|
CVE-2021-1399Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability | Exploitation statusNot exploited | FixNo | Published04/08/2021 | SeverityMedium |
|---|
CVE-2021-1364Cisco Unified Communications Products Vulnerabilities | Exploitation statusNot exploited | FixNo | Published01/20/2021 | SeverityMedium |
|---|
CVE-2021-1357Cisco Unified Communications Products Vulnerabilities | Exploitation statusNot exploited | FixNo | Published01/20/2021 | SeverityMedium |
|---|
CVE-2021-1355Cisco Unified Communications Products Vulnerabilities | Exploitation statusNot exploited | FixNo | Published01/20/2021 | SeverityMedium |
|---|
CVE-2021-1282Cisco Unified Communications Products Vulnerabilities | Exploitation statusNot exploited | FixNo | Published01/20/2021 | SeverityMedium |
|---|
CVE-2020-3135Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability | Exploitation statusNot exploited | FixNo | Published09/23/2020 | SeverityMedium |
|---|
CVE-2020-3346Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixNo | Published08/17/2020 | SeverityMedium |
|---|
62 Results | Page 1 of 2