Unified Communications Manager IM And Presence Service vulnerabilities

Product

Unified Communications Manager IM And Presence Service

by Cisco · last CVE Jan 21, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities38 In the news0 Timeline

Severity mix

Critical 3High 10Medium 20Low 0

Severity

All severities38 Critical3 High10 Medium20 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Unified Communications Manager IM And Presence Service to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-20859	8.8	1%	Jul 6	A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM… Affected: 14.0 before 14.0su2
CVE-2018-0363	8.8	1%	Jun 21	A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (formerly CUPS) could allow an unauthenticated, remote attacker… Affected: 11.5(1)
CVE-2019-1845	8.6	5%	Jun 5	A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePresence Video Communication… Affected: 11.5(1)
CVE-2022-20786	8.1	1%	Apr 21	A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote… Affected: 11.5\(1\) before 11.5\(1\)su11; 12.5\(1\) before 12.5\(1\)su6; 14.0 before 14.0su1
CVE-2021-1365	8.1	1%	May 6	Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to… Affected: 10.5 before 11.5\(1\)su9; 12.0 before 12.5\(1\)su4
CVE-2021-1363	8.1	1%	May 6	Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to… Affected: 10.5 before 11.5\(1\)su9; 12.0 before 12.5\(1\)su4
CVE-2023-20108	7.5	1%	Jun 28	A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated,… Affected: 12.5(1); 14su
CVE-2018-0409	7.5	3%	Aug 15	A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video Communication Server (VCS)… Affected: 11.5; 11.5(1)
CVE-2016-6464	7.5	3%	Dec 14	A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view… Affected: 10.5(1); 10.5(2); 11.0(1); 11.5(1)
CVE-2016-1466	7.5	3%	Aug 8	Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers to… Affected: 9.1(1); 10.5(2); 11.0(1); 11.5(1)