Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

239 records

Priority CRITICAL 96KEV

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.88528 Published 2026-06-03 No fix listed CWE-918
Priority CRITICAL 100KEV

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unif…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04541 Published 2026-01-21 No fix listed CWE-94
Priority LOW 37

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management Edition (SME) Software could allow an unauthenticated, remote at…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00179 Published 2025-09-03 No fix listed CWE-352
Priority MEDIUM 51

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to log in to an af…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01185 Published 2025-07-02 No fix listed CWE-798
Priority LOW 31

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00188 Published 2025-06-04 No fix listed CWE-77
Priority LOW 25

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00441 Published 2024-11-18 No fix listed CWE-79
Priority LOW 27

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticat…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00334 Published 2024-11-06 No fix listed CWE-79
Priority LOW 27

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticat…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0037 Published 2024-08-21 No fix listed CWE-79
Priority LOW 39

A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00745 Published 2024-08-21 No fix listed CWE-787
Priority MEDIUM 53

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02399 Published 2024-01-26 No fix listed CWE-502
Priority LOW 39

A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management in…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00808 Published 2023-10-04 No fix listed CWE-400
Priority LOW 34

A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00488 Published 2023-08-30 No fix listed CWE-347
Priority MEDIUM 40

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00952 Published 2023-08-16 No fix listed CWE-89
Priority LOW 28

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM &…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2023-08-16 No fix listed CWE-79
Priority LOW 31

A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an aut…

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.0071 Published 2023-06-28 No fix listed CWE-835
Priority MEDIUM 42

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00927 Published 2023-01-19 No fix listed CWE-89
Priority LOW 38

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01301 Published 2022-08-10 No fix listed CWE-22
Priority LOW 23

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01489 Published 2022-07-06 No fix listed CWE-23
Priority MEDIUM 41

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection co…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01299 Published 2022-07-06 No fix listed CWE-284
Priority LOW 29

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM &…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00774 Published 2022-07-06 No fix listed CWE-79
Priority LOW 29

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications M…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00774 Published 2022-07-06 No fix listed CWE-79
Priority LOW 32

A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Man…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01515 Published 2022-07-06 No fix listed CWE-36
Priority LOW 32

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote at…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01067 Published 2022-07-06 No fix listed CWE-208
Priority LOW 29

A vulnerability in the Cisco Discovery Protocol of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, ad…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00351 Published 2022-04-21 No fix listed CWE-754
Priority LOW 33

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01856 Published 2022-04-21 No fix listed CWE-23
Load more