Cisco Unity Connection
Cisco- Product type
- Other
- Catalog vulnerabilities
- 31
Severity across 31 analyzed records
en
Verify to analyze this security profile
As of 09/14/2026, within CyStack's analyzed data, Cisco Unity Connection has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Cisco Unity Connection and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-20034Cisco Unity Connection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/06/2026 | SeverityHigh |
CVE-2026-20035Cisco Unity Connection Server-Side Request Forgery Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/06/2026 | SeverityHigh |
CVE-2026-20059Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2026 | SeverityMedium |
CVE-2026-20061Cisco Unity Connection SQL Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2026 | SeverityMedium |
CVE-2026-20060Cisco Unity Connection Open Redirect Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2026 | SeverityMedium |
CVE-2026-20081Cisco Unity Connection Arbitrary File Download Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2026 | SeverityMedium |
CVE-2026-20078Cisco Unity Connection Arbitrary File Download Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2026 | SeverityMedium |
CVE-2026-20045Cisco Unified Communications Products Remote Code Execution Vulnerability | Exploitation statusKEV | FixNot confirmed | Published01/21/2026 | SeverityHigh |
CVE-2025-20278Cisco Unified Communications Products Command Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/04/2025 | SeverityMedium |
CVE-2025-20112Cisco Unified Communications Products Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/21/2025 | SeverityMedium |
CVE-2020-3532Cisco Unified Communications Products Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2024-20253 | Exploitation statusNot known exploited | FixNot confirmed | Published01/26/2024 | SeverityCritical |
CVE-2024-20305 | Exploitation statusNot known exploited | FixNot confirmed | Published01/26/2024 | SeverityMedium |
CVE-2024-20272 | Exploitation statusNot known exploited | FixNot confirmed | Published01/17/2024 | SeverityHigh |
CVE-2023-20259 | Exploitation statusNot confirmed | FixNot confirmed | Published10/04/2023 | SeverityHigh |
CVE-2023-20266 | Exploitation statusNot known exploited | FixNot confirmed | Published08/30/2023 | SeverityMedium |
CVE-2022-20800Cisco Unified Communications Products Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/06/2022 | SeverityMedium |
CVE-2021-34701Cisco Unified Communications Products Path Traversal Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/04/2021 | SeverityMedium |
CVE-2021-1409Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/08/2021 | SeverityMedium |
CVE-2021-1408Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/08/2021 | SeverityMedium |
CVE-2021-1407Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/08/2021 | SeverityMedium |
CVE-2021-1380Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/08/2021 | SeverityMedium |
CVE-2021-1362Cisco Unified Communications Products Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/08/2021 | SeverityHigh |
CVE-2019-15963Cisco Unified Communications Manager Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/23/2020 | SeverityMedium |
CVE-2020-3130Cisco Unity Connection Directory Traversal Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/23/2020 | SeverityMedium |
CVE-2020-3282Cisco Unified Communications Products Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/02/2020 | SeverityMedium |
CVE-2020-3129Cisco Unity Connection Stored Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published01/26/2020 | SeverityMedium |
CVE-2019-12707Multiple Cisco Unified Communications Products Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/02/2019 | SeverityMedium |
CVE-2019-1685Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/21/2019 | SeverityMedium |
CVE-2018-15426Cisco Unity Connection Stored Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/05/2018 | SeverityUnknown |
CVE-2018-15396Cisco Unity Connection File Upload Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/05/2018 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan