Unified Communications Manager Im And Presence Service (Cisco) - vulnerabilities (CVEs)

39 CVEs, 0 in the last 30 days, 62 known versions, newest CVE from 2026-01-21. Vendor: Cisco.

CVEs of Unified Communications Manager Im And Presence Service

CVE-2026-20045 - CVSS 9.8 (critical), 2026-01-21: A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco…
CVE-2025-20330 - CVSS 6.1 (medium), 2025-09-03: A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an…
CVE-2025-20278 - CVSS 6.7 (medium), 2025-06-04: A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2024-20457 - CVSS 6.5 (medium), 2024-11-06: A vulnerability in the logging component of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated,…
CVE-2024-20310 - CVSS 6.1 (medium), 2024-04-03: A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated,…
CVE-2024-20253 - CVSS 10 (critical), 2024-01-26: A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute…
CVE-2023-20242 - CVSS 6.1 (medium), 2023-08-16: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition…
CVE-2023-20108 - CVSS 7.5 (high), 2023-06-28: A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an…
CVE-2022-20815 - CVSS 6.1 (medium), 2022-07-06: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition…
CVE-2022-20800 - CVSS 6.1 (medium), 2022-07-06: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session…
CVE-2022-20791 - CVSS 6.5 (medium), 2022-07-06: A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management…
CVE-2022-20859 - CVSS 8.8 (high), 2022-07-06: A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &…
CVE-2022-20786 - CVSS 8.1 (high), 2022-04-21: A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an…
CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…
CVE-2021-34773 - CVSS 6.5 (medium), 2021-11-04: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session…
CVE-2021-34701 - CVSS 4.3 (medium), 2021-11-04: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session…
CVE-2021-1365 - CVSS 8.1 (high), 2021-05-06: Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated,…
CVE-2021-1363 - CVSS 8.1 (high), 2021-05-06: Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated,…
CVE-2021-1357 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2021-1355 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2021-1364 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2021-1282 - CVSS 6.5 (medium), 2021-01-20: Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path…
CVE-2020-27121 - CVSS 6.5 (medium), 2020-11-06: A vulnerability in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) Software could allow an authenticated, remote attacker…
CVE-2020-3282 - CVSS 6.1 (medium), 2020-07-02: A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management…
CVE-2019-1915 - CVSS 6.5 (medium), 2019-10-02: A vulnerability in the web-based interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME),…
CVE-2019-12707 - CVSS 6.1 (medium), 2019-10-02: A vulnerability in the web-based interface of multiple Cisco Unified Communications products could allow an unauthenticated, remote attacker to conduct a…
CVE-2019-1845 - CVSS 8.6 (high), 2019-06-05: A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePresence…
CVE-2018-15403 - CVSS 5.4 (medium), 2018-10-05: A vulnerability in the web interface of Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified Communications Manager IM & Presence…
CVE-2018-0409 - CVSS 7.5 (high), 2018-08-15: A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video…
CVE-2018-0396 - CVSS 6.1 (medium), 2018-07-18: A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote…
CVE-2018-0363 - CVSS 8.8 (high), 2018-06-21: A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (formerly CUPS) could allow an…
CVE-2017-12337 - CVSS 9.8 (critical), 2017-11-16: A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an…
CVE-2016-6464 - CVSS 7.5 (high), 2016-12-14: A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote…
CVE-2016-1466 - CVSS 7.5 (high), 2016-08-08: Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows…
CVE-2015-6310 - CVSS 5 (medium), 2015-10-08: The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of service (SIP proxy…
CVE-2015-4294 - CVSS 4.3 (medium), 2015-08-01: Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web script or HTML by…
CVE-2015-4222 - CVSS 6.5 (medium), 2015-06-26: SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL…
CVE-2015-4221 - CVSS 4 (medium), 2015-06-26: Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to…
CVE-2014-8000 - CVSS 5 (medium), 2014-11-21: Cisco Unified Communications Manager IM and Presence Service 9.1(1) produces different returned messages for URL requests depending on whether a username…