Cisco Unified Communications Manager (Cisco) - vulnerabilities (CVEs)

61 CVEs, 9 in the last 30 days, 46 known versions, newest CVE from 2026-10-21. Vendor: Cisco.

CVEs of Cisco Unified Communications Manager

CVE-2026-76481 - CVSS 7.5 (high), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration…
CVE-2026-76487 - CVSS 5.3 (medium), 2026-10-21: A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME)…
CVE-2026-76479 - CVSS 7.8 (high), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration…
CVE-2026-76478 - CVSS 8.8 (high), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration…
CVE-2026-76476 - CVSS 8.8 (high), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration…
CVE-2026-76477 - CVSS 8.8 (high), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration…
CVE-2026-76475 - CVSS 9.3 (critical), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration…
CVE-2026-76474 - CVSS 9.8 (critical), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration…
CVE-2026-76473 - CVSS 9.8 (critical), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration…
CVE-2026-20230 - CVSS 8.6 (high), 2026-06-03: A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME)…
CVE-2026-20045 - CVSS 9.8 (critical), 2026-01-21: A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco…
CVE-2025-20361 - CVSS 4.8 (medium), 2025-10-01: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2025-20326 - CVSS 8.8 (high), 2025-09-03: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management…
CVE-2025-20309 - CVSS 10 (critical), 2025-07-02: A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME)…
CVE-2025-20278 - CVSS 6.7 (medium), 2025-06-04: A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2025-20112 - CVSS 5.1 (medium), 2025-05-21: A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate…
CVE-2020-3532 - CVSS 6.1 (medium), 2024-11-18: A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session…
CVE-2020-3420 - CVSS 5.4 (medium), 2024-11-18: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2024-20511 - CVSS 6.1 (medium), 2024-11-06: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2024-20488 - CVSS 6.1 (medium), 2024-08-21: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2024-20375 - CVSS 8.6 (high), 2024-08-21: A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2024-20253 - CVSS 10 (critical), 2024-01-26: A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute…
CVE-2023-20259 - CVSS 8.6 (high), 2023-10-04: A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU…
CVE-2023-20266 - CVSS 7.2 (high), 2023-08-30: A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management…
CVE-2023-20211 - CVSS 8.8 (high), 2023-08-16: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2023-20242 - CVSS 6.1 (medium), 2023-08-16: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition…
CVE-2023-20116 - CVSS 6.8 (medium), 2023-06-28: A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager…
CVE-2023-20010 - CVSS 8.8 (high), 2023-01-20: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2022-20816 - CVSS 8.1 (high), 2022-08-10: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2022-20791 - CVSS 6.5 (medium), 2022-07-06: A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management…
CVE-2022-20862 - CVSS 4.3 (medium), 2022-07-06: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2022-20752 - CVSS 5.3 (medium), 2022-07-06: A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and…
CVE-2022-20859 - CVSS 8.8 (high), 2022-07-06: A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &…
CVE-2022-20815 - CVSS 6.1 (medium), 2022-07-06: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition…
CVE-2022-20787 - CVSS 6.8 (medium), 2022-04-21: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management…
CVE-2022-20790 - CVSS 6.5 (medium), 2022-04-21: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2022-20789 - CVSS 6.5 (medium), 2022-04-21: A vulnerability in the software upgrade process of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2022-20788 - CVSS 6.1 (medium), 2022-04-21: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition…
CVE-2022-20804 - CVSS 6.5 (medium), 2022-04-21: A vulnerability in the Cisco Discovery Protocol of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2021-34773 - CVSS 6.5 (medium), 2021-11-04: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session…
CVE-2021-1478 - CVSS 6.5 (medium), 2021-05-06: A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications…
CVE-2021-1406 - CVSS 4.9 (medium), 2021-04-08: A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME)…
CVE-2021-1399 - CVSS 4.3 (medium), 2021-04-08: A vulnerability in the Self Care Portal of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management…
CVE-2021-1355 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2021-1364 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2021-1357 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2021-1282 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2020-3135 - CVSS 8.8 (high), 2020-09-23: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM) could allow an unauthenticated, remote attacker to conduct…
CVE-2020-3346 - CVSS 6.1 (medium), 2020-08-17: A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition…
CVE-2020-3177 - CVSS 7.5 (high), 2020-04-15: A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and Cisco Unified Communications Manager…
CVE-2015-0749 - CVSS 6.1 (medium), 2020-02-19: A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on the…
CVE-2019-15972 - CVSS 8.8 (high), 2019-11-26: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL…
CVE-2019-1915 - CVSS 6.5 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME),…
CVE-2019-15272 - CVSS 6.5 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME)…
CVE-2019-12710 - CVSS 4.9 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME)…
CVE-2019-12716 - CVSS 6.1 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME)…
CVE-2019-12715 - CVSS 6.1 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME)…
CVE-2019-12711 - CVSS 6.5 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME)…
CVE-2019-1887 - CVSS 8.6 (high), 2019-07-06: A vulnerability in the Session Initiation Protocol (SIP) protocol implementation of Cisco Unified Communications Manager could allow an unauthenticated,…
CVE-2019-1837 - CVSS 7.5 (high), 2019-04-18: A vulnerability in the User Data Services (UDS) API of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to…
CVE-2018-0474 - CVSS 8.8 (high), 2019-01-10: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest…
CVE-2013-7030 - CVSS 7.3 (high), 2013-12-12: The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sensitive information from a phone via an…