Unified Communications Manager (Cisco) - vulnerabilities (CVEs)

239 CVEs, 0 in the last 30 days, 401 known versions, newest CVE from 2026-06-03. Vendor: Cisco.

CVEs of Unified Communications Manager

CVE-2026-20230 - CVSS 8.6 (high), 2026-06-03: A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME)…
CVE-2026-20045 - CVSS 9.8 (critical), 2026-01-21: A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco…
CVE-2025-20326 - CVSS 8.8 (high), 2025-09-03: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management…
CVE-2025-20309 - CVSS 10 (critical), 2025-07-02: A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME)…
CVE-2025-20278 - CVSS 6.7 (medium), 2025-06-04: A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2020-3420 - CVSS 5.4 (medium), 2024-11-18: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2024-20511 - CVSS 6.1 (medium), 2024-11-06: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2024-20488 - CVSS 6.1 (medium), 2024-08-21: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2024-20375 - CVSS 8.6 (high), 2024-08-21: A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2024-20253 - CVSS 10 (critical), 2024-01-26: A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute…
CVE-2023-20259 - CVSS 8.6 (high), 2023-10-04: A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU…
CVE-2023-20266 - CVSS 7.2 (high), 2023-08-30: A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management…
CVE-2023-20211 - CVSS 8.8 (high), 2023-08-16: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2023-20242 - CVSS 6.1 (medium), 2023-08-16: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition…
CVE-2023-20116 - CVSS 6.8 (medium), 2023-06-28: A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager…
CVE-2023-20010 - CVSS 8.8 (high), 2023-01-20: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2022-20816 - CVSS 8.1 (high), 2022-08-10: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2022-20859 - CVSS 8.8 (high), 2022-07-06: A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &…
CVE-2022-20752 - CVSS 5.3 (medium), 2022-07-06: A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and…
CVE-2022-20815 - CVSS 6.1 (medium), 2022-07-06: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition…
CVE-2022-20800 - CVSS 6.1 (medium), 2022-07-06: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session…
CVE-2022-20862 - CVSS 4.3 (medium), 2022-07-06: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2022-20791 - CVSS 6.5 (medium), 2022-07-06: A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management…
CVE-2022-20789 - CVSS 6.5 (medium), 2022-04-21: A vulnerability in the software upgrade process of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2022-20788 - CVSS 6.1 (medium), 2022-04-21: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition…
CVE-2022-20804 - CVSS 6.5 (medium), 2022-04-21: A vulnerability in the Cisco Discovery Protocol of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2022-20787 - CVSS 6.8 (medium), 2022-04-21: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management…
CVE-2022-20790 - CVSS 6.5 (medium), 2022-04-21: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…
CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…
CVE-2021-34773 - CVSS 6.5 (medium), 2021-11-04: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session…
CVE-2021-34701 - CVSS 4.3 (medium), 2021-11-04: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session…
CVE-2021-1478 - CVSS 6.5 (medium), 2021-05-06: A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications…
CVE-2021-1407 - CVSS 6.1 (medium), 2021-04-08: Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM…
CVE-2021-1362 - CVSS 8.8 (high), 2021-04-08: A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco…
CVE-2021-1406 - CVSS 4.9 (medium), 2021-04-08: A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME)…
CVE-2021-1409 - CVSS 6.1 (medium), 2021-04-08: Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM…
CVE-2021-1399 - CVSS 4.3 (medium), 2021-04-08: A vulnerability in the Self Care Portal of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management…
CVE-2021-1408 - CVSS 6.1 (medium), 2021-04-08: Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM…
CVE-2021-1380 - CVSS 6.1 (medium), 2021-04-08: Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM…
CVE-2021-1355 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2021-1364 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2021-1357 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2021-1282 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2021-1226 - CVSS 6.5 (medium), 2021-01-13: A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco…
CVE-2020-3135 - CVSS 8.8 (high), 2020-09-23: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM) could allow an unauthenticated, remote attacker to conduct…
CVE-2019-15963 - CVSS 6.5 (medium), 2020-09-23: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive…
CVE-2020-3346 - CVSS 6.1 (medium), 2020-08-17: A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition…
CVE-2020-3282 - CVSS 6.1 (medium), 2020-07-02: A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management…
CVE-2020-3177 - CVSS 7.5 (high), 2020-04-15: A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and Cisco Unified Communications Manager…
CVE-2015-0749 - CVSS 6.1 (medium), 2020-02-19: A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on the…
CVE-2019-15972 - CVSS 8.8 (high), 2019-11-26: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL…
CVE-2019-1915 - CVSS 6.5 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME),…
CVE-2019-15272 - CVSS 6.5 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME)…
CVE-2019-12707 - CVSS 6.1 (medium), 2019-10-02: A vulnerability in the web-based interface of multiple Cisco Unified Communications products could allow an unauthenticated, remote attacker to conduct a…
CVE-2019-12715 - CVSS 6.1 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME)…
CVE-2019-12711 - CVSS 6.5 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME)…
CVE-2019-12710 - CVSS 4.9 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME)…
CVE-2019-12716 - CVSS 6.1 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME)…
CVE-2019-1887 - CVSS 8.6 (high), 2019-07-06: A vulnerability in the Session Initiation Protocol (SIP) protocol implementation of Cisco Unified Communications Manager could allow an unauthenticated,…
CVE-2019-1837 - CVSS 7.5 (high), 2019-04-18: A vulnerability in the User Data Services (UDS) API of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to…
CVE-2018-0474 - CVSS 8.8 (high), 2019-01-10: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest…
CVE-2018-15403 - CVSS 5.4 (medium), 2018-10-05: A vulnerability in the web interface of Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified Communications Manager IM & Presence…
CVE-2018-0411 - CVSS 6.1 (medium), 2018-08-01: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a…
CVE-2018-0355 - CVSS 6.1 (medium), 2018-06-07: A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to conduct a cross-frame…
CVE-2018-0340 - CVSS 5.4 (medium), 2018-06-07: A vulnerability in the web framework of the Cisco Unified Communications Manager (Unified CM) software could allow an authenticated, remote attacker to…
CVE-2017-6779 - CVSS 7.5 (high), 2018-06-07: Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow…
CVE-2018-0328 - CVSS 6.1 (medium), 2018-05-17: A vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified Presence could allow an unauthenticated, remote attacker to…
CVE-2018-0267 - CVSS 6.5 (medium), 2018-04-19: A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local attacker to view sensitive data that should…
CVE-2018-0266 - CVSS 4.3 (medium), 2018-04-19: A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The…
CVE-2018-0198 - CVSS 5.3 (medium), 2018-03-27: A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The…
CVE-2018-0206 - CVSS 6.1 (medium), 2018-02-22: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a…
CVE-2018-0135 - CVSS 4.3 (medium), 2018-02-08: A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on an affected system.…
CVE-2018-0120 - CVSS 4.3 (medium), 2018-02-08: A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct an SQL injection attack…
CVE-2018-0105 - CVSS 5.3 (medium), 2018-01-18: A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The…
CVE-2018-0118 - CVSS 6.1 (medium), 2018-01-11: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to perform a…
CVE-2017-12357 - CVSS 5.4 (medium), 2017-11-30: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a…
CVE-2017-12337 - CVSS 9.8 (critical), 2017-11-16: A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an…
CVE-2017-12258 - CVSS 6.1 (medium), 2017-10-05: A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting…
CVE-2017-6791 - CVSS 7.5 (high), 2017-09-07: A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a…
CVE-2017-6785 - CVSS 4.3 (medium), 2017-08-17: A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to…
CVE-2017-6758 - CVSS 6.5 (medium), 2017-08-07: A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker to access arbitrary…
CVE-2017-6757 - CVSS 8.8 (high), 2017-08-07: A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) could allow an authenticated, remote attacker…
CVE-2017-6654 - CVSS 6.1 (medium), 2017-05-22: A vulnerability in the web-based management interface of Cisco Unified Communications Manager 10.5 through 11.5 could allow an unauthenticated, remote…
CVE-2017-3808 - CVSS 7.5 (high), 2017-04-20: A vulnerability in the Session Initiation Protocol (SIP) UDP throttling process of Cisco Unified Communications Manager (Cisco Unified CM) could allow an…
CVE-2017-3888 - CVSS 5.4 (medium), 2017-04-07: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a…
CVE-2017-3886 - CVSS 4.9 (medium), 2017-04-07: A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the…
CVE-2017-3877 - CVSS 6.5 (medium), 2017-03-17: A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticated, remote attacker to conduct a…
CVE-2017-3874 - CVSS 5.4 (medium), 2017-03-17: A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated, remote attacker to perform a…
CVE-2017-3872 - CVSS 6.1 (medium), 2017-03-17: A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an…
CVE-2017-3828 - CVSS 6.1 (medium), 2017-02-22: A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to…
CVE-2017-3836 - CVSS 4.3 (medium), 2017-02-22: A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More…
CVE-2017-3821 - CVSS 6.1 (medium), 2017-02-22: A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected…
CVE-2017-3833 - CVSS 6.1 (medium), 2017-02-22: A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting…
CVE-2017-3829 - CVSS 6.1 (medium), 2017-02-22: A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to…
CVE-2017-3798 - CVSS 6.1 (medium), 2017-01-26: A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an…
CVE-2017-3802 - CVSS 6.1 (medium), 2017-01-26: A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against…
CVE-2016-9210 - CVSS 7.5 (high), 2016-12-14: A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote…
CVE-2016-9206 - CVSS 6.1 (medium), 2016-12-14: A vulnerability in the ccmadmin page of Cisco Unified Communications Manager (CUCM) could allow an unauthenticated, remote attacker to conduct reflected…
CVE-2016-6472 - CVSS 6.1 (medium), 2016-11-19: A vulnerability in several parameters of the ccmivr page of Cisco Unified Communication Manager (CallManager) could allow an unauthenticated, remote attacker…
CVE-2016-6440 - CVSS 6.5 (medium), 2016-10-27: The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within a web page, which in turn could lead…