Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

65 records

Priority MEDIUM 41

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00712 Published 2026-05-06 No fix listed CWE-35
Priority LOW 31

A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00304 Published 2026-05-06 No fix listed CWE-918
Priority LOW 27

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00193 Published 2026-04-15 No fix listed CWE-79
Priority LOW 28

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00228 Published 2026-04-15 No fix listed CWE-89
Priority LOW 21

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00202 Published 2026-04-15 No fix listed CWE-601
Priority LOW 29

Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00388 Published 2026-04-15 No fix listed CWE-23
Priority LOW 29

Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00388 Published 2026-04-15 No fix listed CWE-23
Priority CRITICAL 100KEV

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unif…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04541 Published 2026-01-21 No fix listed CWE-94
Priority LOW 31

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00188 Published 2025-06-04 No fix listed CWE-77
Priority MEDIUM 53

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02399 Published 2024-01-26 No fix listed CWE-502
Priority LOW 22

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00352 Published 2024-01-26 No fix listed CWE-79
Priority MEDIUM 51

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying opera…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01604 Published 2024-01-17 No fix listed CWE-434
Priority LOW 39

A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management in…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00808 Published 2023-10-04 No fix listed CWE-400
Priority LOW 34

A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00488 Published 2023-08-30 No fix listed CWE-347
Priority MEDIUM 41

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection co…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01299 Published 2022-07-06 No fix listed CWE-284
Priority LOW 29

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications M…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00774 Published 2022-07-06 No fix listed CWE-79
Priority LOW 32

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote at…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01067 Published 2022-07-06 No fix listed CWE-208
Priority LOW 29

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthen…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00835 Published 2022-04-21 No fix listed CWE-79
Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority LOW 23

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications M…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01563 Published 2021-11-04 No fix listed CWE-22
Priority LOW 29

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Com…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00852 Published 2021-04-08 No fix listed CWE-89
Priority LOW 29

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Com…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00852 Published 2021-04-08 No fix listed CWE-89
Priority MEDIUM 45

A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Uni…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02811 Published 2021-04-08 No fix listed CWE-94
Priority LOW 31

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cis…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00919 Published 2021-01-13 No fix listed CWE-532
Priority LOW 32

A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying filesystem.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0181 Published 2020-09-23 No fix listed CWE-22
Load more