Cisco Unified Communications Manager
Cisco
- Product type
- Other
- Catalog vulnerabilities
- 52
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Severity across 52 analyzed records
Verify to analyze this security profile
As of 09/13/2026, within CyStack's analyzed data, Cisco Unified Communications Manager has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Cisco Unified Communications Manager and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability | Exploitation statusPublic exploit | FixNot confirmed | Published06/03/2026 | SeverityHigh |
CVE-2026-20045Cisco Unified Communications Products Remote Code Execution Vulnerability | Exploitation statusKEV | FixNot confirmed | Published01/21/2026 | SeverityHigh |
CVE-2025-20361Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/01/2025 | SeverityMedium |
CVE-2025-20326Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/03/2025 | SeverityMedium |
CVE-2025-20309Cisco Unified Communications Manager Static SSH Credentials Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/02/2025 | SeverityCritical |
CVE-2025-20278Cisco Unified Communications Products Command Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/04/2025 | SeverityMedium |
CVE-2025-20112Cisco Unified Communications Products Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/21/2025 | SeverityMedium |
CVE-2020-3420Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2020-3532Cisco Unified Communications Products Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2024-20511Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20488Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published08/21/2024 | SeverityMedium |
CVE-2024-20375 | Exploitation statusNot known exploited | FixNot confirmed | Published08/21/2024 | SeverityHigh |
CVE-2024-20253 | Exploitation statusNot known exploited | FixNot confirmed | Published01/26/2024 | SeverityCritical |
CVE-2023-20259 | Exploitation statusNot confirmed | FixNot confirmed | Published10/04/2023 | SeverityHigh |
CVE-2023-20266 | Exploitation statusNot known exploited | FixNot confirmed | Published08/30/2023 | SeverityMedium |
CVE-2023-20211 | Exploitation statusNot confirmed | FixNot confirmed | Published08/16/2023 | SeverityHigh |
CVE-2023-20242 | Exploitation statusNot confirmed | FixNot confirmed | Published08/16/2023 | SeverityMedium |
CVE-2023-20116 | Exploitation statusNot confirmed | FixNot confirmed | Published06/28/2023 | SeverityMedium |
CVE-2023-20010 | Exploitation statusNot known exploited | FixNot confirmed | Published01/19/2023 | SeverityHigh |
CVE-2022-20816Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published08/10/2022 | SeverityMedium |
CVE-2022-20862Cisco Unified Communications Manager Arbitrary File Read Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/06/2022 | SeverityMedium |
CVE-2022-20859Cisco Unified Communications Products Access Control Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/06/2022 | SeverityMedium |
CVE-2022-20815Cisco Unified Communications Products Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/06/2022 | SeverityMedium |
CVE-2022-20791Cisco Unified Communications Products Arbitrary File Read Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/06/2022 | SeverityMedium |
CVE-2022-20752Cisco Unified Communications Products Timing Attack Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/06/2022 | SeverityMedium |
CVE-2022-20804Cisco Unified Communications Products Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/21/2022 | SeverityMedium |
CVE-2022-20790Cisco Unified Communications Products Arbitrary File Read Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/21/2022 | SeverityMedium |
CVE-2022-20789Cisco Unified Communications Products Arbitrary File Write Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/21/2022 | SeverityMedium |
CVE-2022-20788Cisco Unified Communications Products Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/21/2022 | SeverityMedium |
CVE-2022-20787Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/21/2022 | SeverityMedium |
CVE-2021-34773Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/04/2021 | SeverityMedium |
CVE-2021-1478Cisco Unified Communications Manager Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/06/2021 | SeverityMedium |
CVE-2021-1406Cisco Unified Communications Manager Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/08/2021 | SeverityMedium |
CVE-2021-1399Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/08/2021 | SeverityMedium |
CVE-2021-1355Cisco Unified Communications Products Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published01/20/2021 | SeverityMedium |
CVE-2021-1357Cisco Unified Communications Products Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published01/20/2021 | SeverityMedium |
CVE-2021-1364Cisco Unified Communications Products Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published01/20/2021 | SeverityMedium |
CVE-2021-1282Cisco Unified Communications Products Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published01/20/2021 | SeverityMedium |
CVE-2020-3135Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/23/2020 | SeverityMedium |
CVE-2020-3346Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published08/17/2020 | SeverityMedium |
CVE-2020-3177Cisco Unified Communications Manager Path Traversal Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2020 | SeverityHigh |
CVE-2015-0749Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/19/2020 | SeverityMedium |
CVE-2019-15972Cisco Unified Communications Manager SQL Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/26/2019 | SeverityMedium |
CVE-2019-1915Multiple Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/02/2019 | SeverityMedium |
CVE-2019-15272Cisco Unified Communications Manager Security Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/02/2019 | SeverityMedium |
CVE-2019-12716Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/02/2019 | SeverityMedium |
CVE-2019-12715Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/02/2019 | SeverityMedium |
CVE-2019-12711Cisco Unified Communications Manager XML External Expansion Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/02/2019 | SeverityMedium |
CVE-2019-12710Cisco Unified Communications Manager SQL Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/02/2019 | SeverityMedium |
CVE-2019-1887Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/06/2019 | SeverityHigh |
CVE-2019-1837Cisco Unified Communications Manager Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/18/2019 | SeverityMedium |
CVE-2018-0474Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published01/10/2019 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
