Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

39 records

Vendor: Cisco Component: Unified Communications Manager Im And Presence Service Clear all filters
TI-2026-16259 CVE-2026-20045 · GHSA-h4w3-hxw6-99q7

Cisco Unified Communications Products Remote Code Execution Vulnerability

Priority CRITICAL 100KEV

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unif…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04541 Published 2026-01-21 No fix listed CWE-94
TI-2025-14575 CVE-2025-20278 · GHSA-qvpj-hmr8-j79p

Cisco Unified Communications Products Command Injection Vulnerability

Priority LOW 31

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00188 Published 2025-06-04 No fix listed CWE-77
TI-2024-13382 CVE-2024-20457 · GHSA-3c6f-r64x-4f7r

Cisco Unified Communications Manager IM & Presence Service Information Disclosure Vulnerability

Priority LOW 29

A vulnerability in the logging component of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to view sensitive information in clear text o…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00441 Published 2024-11-06 No fix listed CWE-200
TI-2024-13244 CVE-2024-20310 · GHSA-34jc-mc86-8ww9

Path traversal in Cisco IOS XE Software

Priority LOW 30

A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack ag…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00498 Published 2024-04-03 No fix listed CWE-23
TI-2024-13188 CVE-2024-20253 · GHSA-gxh9-cf3g-3v7f

Deserialization of untrusted data in Cisco Unified Contact Center Enterprise

Priority MEDIUM 53

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02399 Published 2024-01-26 No fix listed CWE-502
TI-2023-06946 CVE-2023-20242 · GHSA-2prg-gf64-mf8x

Cross-site scripting in Cisco Unified Communications Manager

Priority LOW 28

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM &…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2023-08-16 No fix listed CWE-79
TI-2023-06815 CVE-2023-20108 · GHSA-8937-gcf5-34xq

Resource allocation without limits in Cisco Unified Communications Manager IM and…

Priority LOW 35

A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to cause a temporary service o…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00933 Published 2023-06-28 No fix listed CWE-789
TI-2022-05418 CVE-2022-20859 · GHSA-vjcc-9q9g-593v

Cisco Unified Communications Products Access Control Vulnerability

Priority MEDIUM 41

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection co…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01299 Published 2022-07-06 No fix listed CWE-284
TI-2022-05374 CVE-2022-20815 · GHSA-7qxf-263x-hxff

Cisco Unified Communications Products Cross-Site Scripting Vulnerability

Priority LOW 29

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM &…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00774 Published 2022-07-06 No fix listed CWE-79
TI-2022-05359 CVE-2022-20800 · GHSA-f698-6gm4-4rpx

Cisco Unified Communications Products Cross-Site Scripting Vulnerability

Priority LOW 29

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications M…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00774 Published 2022-07-06 No fix listed CWE-79
TI-2022-05350 CVE-2022-20791 · GHSA-q64f-4f9p-qmph

Cisco Unified Communications Products Arbitrary File Read Vulnerability

Priority LOW 32

A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Man…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01515 Published 2022-07-06 No fix listed CWE-36
TI-2022-05345 CVE-2022-20786 · GHSA-6rfr-j54f-6xv3

Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability

Priority LOW 37

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to conduct SQL injection attacks…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00841 Published 2022-04-21 No fix listed CWE-89
TI-2021-19919 CVE-2021-44228 · GHSA-jfh8-c2jp-5v3q

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
TI-2021-13701 CVE-2021-34701 · GHSA-2pf4-5wvc-pjgh

Cisco Unified Communications Products Path Traversal Vulnerability

Priority LOW 23

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications M…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01563 Published 2021-11-04 No fix listed CWE-22
TI-2021-13771 CVE-2021-34773 · GHSA-rj22-gp23-c66j

Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability

Priority LOW 29

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communicatio…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00502 Published 2021-11-04 No fix listed CWE-352
TI-2021-01090 CVE-2021-1363 · GHSA-5cvv-whmf-q35w

Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities

Priority LOW 37

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affect…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01081 Published 2021-05-06 No fix listed CWE-89
TI-2021-01092 CVE-2021-1365 · GHSA-2f8j-27cg-4598

Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities

Priority LOW 37

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affect…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01081 Published 2021-05-06 No fix listed CWE-89
TI-2021-01082 CVE-2021-1355 · GHSA-xp6m-4hv5-x9xm

Cisco Unified Communications Products Vulnerabilities

Priority LOW 32

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01368 Published 2021-01-20 No fix listed CWE-35
TI-2021-01084 CVE-2021-1357 · GHSA-2f84-q26f-jchx

Cisco Unified Communications Products Vulnerabilities

Priority LOW 32

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01368 Published 2021-01-20 No fix listed CWE-35
TI-2021-01091 CVE-2021-1364 · GHSA-m782-4wcx-2mg3

Cisco Unified Communications Products Vulnerabilities

Priority LOW 32

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01357 Published 2021-01-20 No fix listed CWE-35
TI-2021-01009 CVE-2021-1282 · GHSA-cr6m-7hmj-rqvf

Cisco Unified Communications Products Vulnerabilities

Priority LOW 32

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01357 Published 2021-01-20 No fix listed CWE-35
TI-2020-16483 CVE-2020-27121 · GHSA-7c3f-h49g-4mg6

Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability

Priority LOW 31

A vulnerability in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01164 Published 2020-11-06 No fix listed CWE-248
TI-2020-02840 CVE-2020-3282 · GHSA-fpfg-9g3r-ww3r

Cisco Unified Communications Products Cross-Site Scripting Vulnerability

Priority LOW 29

A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Servi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00801 Published 2020-07-02 No fix listed CWE-79
Load more