Unified Communications Manager IM & Presence Service vulnerabilities

Product

Unified Communications Manager IM & Presence Service

by Cisco · last CVE Oct 4, 2023

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 3Low 0

Severity

Exploitation

Watch

Add Unified Communications Manager IM & Presence Service to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-1362	8.8	3%	Apr 8	A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications… Affected: 10.5\(2\) before 11.5\(1\)su9; 12.0\(1\) before 12.5\(1\)su4
CVE-2023-20259	7.5	1%	Oct 4	A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could… Affected: 12.5(1)su7; 14su3
CVE-2021-1226	6.5	1%	Jan 13	A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified… Affected: 11.5\(1\) before 11.5\(1\)su9; 12.5\(1\) before 12.5\(1\)su3; 10.5(2); 12.0(1)
CVE-2021-1409	6.1	1%	Apr 8	Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service… Affected: before 14
CVE-2021-1380	6.1	1%	Apr 8	Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service… Affected: before 14