Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

39 records in Unified Communications Manager Im And Presence Service · all components

Priority CRITICAL 100KEV

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unif…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04541 Published 2026-01-21 No fix listed CWE-94
Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority MEDIUM 53

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02399 Published 2024-01-26 No fix listed CWE-502
Priority MEDIUM 51

A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePresence Video Communication Server (VCS), and Cisco Expressway Series co…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.04639 Published 2019-06-05 Fixed in 12.5(1) CWE-20
Priority MEDIUM 51

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access t…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06435 Published 2017-11-16 No fix listed CWE-287
Priority MEDIUM 42

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (formerly CUPS) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00847 Published 2018-06-21 No fix listed CWE-352
Priority MEDIUM 41

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection co…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01299 Published 2022-07-06 No fix listed CWE-284
Priority LOW 38

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restrict…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03122 Published 2016-12-14 No fix listed CWE-200
Priority LOW 37

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to conduct SQL injection attacks…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00841 Published 2022-04-21 No fix listed CWE-89
Priority LOW 37

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affect…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01081 Published 2021-05-06 No fix listed CWE-89
Priority LOW 37

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affect…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01081 Published 2021-05-06 No fix listed CWE-89
Priority LOW 35

A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to cause a temporary service o…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00933 Published 2023-06-28 No fix listed CWE-789
Priority LOW 32

A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Man…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01515 Published 2022-07-06 No fix listed CWE-36
Priority LOW 32

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01357 Published 2021-01-20 No fix listed CWE-35
Priority LOW 32

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01368 Published 2021-01-20 No fix listed CWE-35
Priority LOW 32

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01368 Published 2021-01-20 No fix listed CWE-35
Priority LOW 32

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01357 Published 2021-01-20 No fix listed CWE-35
Priority LOW 31

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00188 Published 2025-06-04 No fix listed CWE-77
Priority LOW 31

A vulnerability in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01164 Published 2020-11-06 No fix listed CWE-248
TI-2024-13244 CVE-2024-20310 · GHSA-34jc-mc86-8ww9

Path traversal in Cisco IOS XE Software

Priority LOW 30

A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack ag…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00498 Published 2024-04-03 No fix listed CWE-23
Load more
Open these records in search →