UC
Product
Unified Communications Manager
On CISA KEVExploited in the wild
238
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 24Medium 75Low 0
Watch
Add Unified Communications Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20242 | 6.1 | Aug 16 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco… Affected: 11.5(1); 11.5(1); 12.5(1); 12.5(1); 14.0; 14.0 |
| CVE-2022-20815 | 6.1 | Jul 6 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco… Affected: 14.0 before 14su2; 14.0 before 14su2 |
| CVE-2022-20800 | 6.1 | Jul 6 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition… Affected: 11.5\(1\) before 14su2; 11.5\(1\) before 14su2 |
| CVE-2022-20788 | 6.1 | Apr 21 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco… Affected: 11.5\(1\) before 11.5\(1\)su11; 11.5\(1\) before 11.5\(1\)su11; 12.5\(1\) before 12.5\(1\)su6; 12.5\(1\) before 12.5\(1\)su6; 14.0 before 14su1; 14.0 before 14su1 |
| CVE-2021-1409 | 6.1 | Apr 8 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service… Affected: before 14; before 14 |
| CVE-2021-1408 | 6.1 | Apr 8 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service… Affected: before 14; before 14 |
| CVE-2021-1407 | 6.1 | Apr 8 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service… Affected: before 14; before 14 |
| CVE-2021-1380 | 6.1 | Apr 8 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service… Affected: before 14; before 14 |
| CVE-2020-3346 | 6.1 | Aug 17 | A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow… Affected: 10.5\(2\) through 10.5\(2\)su10; 10.5\(2\) through 10.5\(2\)su10; 11.5\(1\) through 11.5\(1\)su8; 11.5\(1\) through 11.5\(1\)su8; 12.0(1); 12.0(1); +2 more |
| CVE-2020-3282 | 6.1 | Jul 2 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified… Affected: 10.5\(2\) before 10.5\(2\)su10; 10.5\(2\) before 10.5\(2\)su10; 11.5\(1\) before 11.5\(1\)su8; 11.5\(1\) before 11.5\(1\)su8; 12.0(1); 12.0(1); +2 more |
| CVE-2015-0749 | 6.1 | Feb 19 | A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on the affected software Affected: through 10.5\(2.10000.5\) |
| CVE-2019-12716 | 6.1 | Oct 2 | A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an… Affected: 10.5(2.10000.5); 11.5(1.10000.6); 12.0(1.10000.10); 12.5(1.10000.22) |
| CVE-2019-12715 | 6.1 | Oct 2 | A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an… Affected: 10.5(2.10000.5); 11.5(1.10000.6); 12.0(1.10000.10); 12.5(1.10000.22) |
| CVE-2019-12707 | 6.1 | Oct 2 | A vulnerability in the web-based interface of multiple Cisco Unified Communications products could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 10.5(2.10000.5); 11.5(1.10000.6); 12.0(1.10000.10); 12.5(1.10000.22) |
| CVE-2018-0411 | 6.1 | Aug 1 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: 10.5(2.10000.5); 11.0(1.10000.10); 11.5(1.10000.6); 12.0(1.10000.10) |
| CVE-2018-0355 | 6.1 | Jun 7 | A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack… Affected: 10.5(2.10000.5); 11.0(1.10000.10); 11.5(1.10000.6); 12.0(1.10000.10) |
| CVE-2018-0328 | 6.1 | May 17 | A vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified Presence could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 10.5(2.10000.5); 11.0(1.10000.10); 11.5(1.10000.6); 12.0(1.10000.10) |
| CVE-2018-0206 | 6.1 | Feb 22 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: 11.5(1.13900.52) |
| CVE-2018-0118 | 6.1 | Jan 11 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to perform a cross-site scripting… Affected: All versions, or not specified |
| CVE-2017-12258 | 6.1 | Oct 5 | A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack Affected: All versions, or not specified |
| CVE-2017-6654 | 6.1 | May 22 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager 10.5 through 11.5 could allow an unauthenticated, remote attacker to conduct a… Affected: 10.5(2.10000.5); 11.0(1.10000.10); 11.5(1.10000.6) |
| CVE-2017-3872 | 6.1 | Mar 17 | A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote… Affected: 10.5(2.10000.5); 10.5(2.14076.1); 11.0(1.10000.10); 11.5(1.10000.6) |
| CVE-2017-3833 | 6.1 | Feb 22 | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against… Affected: 12.0(0.99999.2) |
| CVE-2017-3829 | 6.1 | Feb 22 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 11.0(1.10000.10); 11.5(1.10000.6) |
| CVE-2017-3828 | 6.1 | Feb 22 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 11.0(1.10000.10); 11.5(1.10000.6) |
| CVE-2017-3821 | 6.1 | Feb 22 | A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting (XSS)… Affected: 10.5(2.14076.1) |
| CVE-2017-3802 | 6.1 | Jan 26 | A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web… Affected: 12.0(0.99000.9) |
| CVE-2017-3798 | 6.1 | Jan 26 | A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote… Affected: 11.5(1.12000.1) |
| CVE-2016-9206 | 6.1 | Dec 14 | A vulnerability in the ccmadmin page of Cisco Unified Communications Manager (CUCM) could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting (XSS)… Affected: 11.5(1.10000.6) |
| CVE-2016-6472 | 6.1 | Nov 19 | A vulnerability in several parameters of the ccmivr page of Cisco Unified Communication Manager (CallManager) could allow an unauthenticated, remote attacker to launch a… Affected: 11.5(1.2) |
| CVE-2023-20116 | 5.7 | Jun 28 | A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management… Affected: 11.5(1.10000.6); 11.5(1.10000.6); 12.0(1.10000.10); 12.0(1.10000.10); 12.5(1.10000.22); 12.5(1.10000.22); +2 more |
| CVE-2020-3420 | 5.4 | Nov 18 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition… Affected: All versions, or not specified |
| CVE-2018-15403 | 5.4 | Oct 5 | A vulnerability in the web interface of Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified Communications Manager IM & Presence Service, and Cisco… Affected: 10.5(2.10000.5); 11.0(1.10000.10); 11.5(1.10000.6); 12.0(1.10000.10) |
| CVE-2018-0340 | 5.4 | Jun 7 | A vulnerability in the web framework of the Cisco Unified Communications Manager (Unified CM) software could allow an authenticated, remote attacker to conduct a cross-site… Affected: 10.5(2.10000.5); 11.0(1.10000.10); 11.5(1.10000.6); 12.0(1.10000.10) |
| CVE-2017-12357 | 5.4 | Nov 30 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 10.5(2.10000.5); 11.0(1.10000.10); 11.5(1.10000.6); 12.0(1.10000.10) |
| CVE-2017-3888 | 5.4 | Apr 7 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site… Affected: 12.0(0.98000.452) |
| CVE-2017-3874 | 5.4 | Mar 17 | A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS)… Affected: 11.5(1.11007.2) |
| CVE-2022-20752 | 5.3 | Jul 6 | A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection… Affected: 12.5\(1\) before 12.5\(1\)su6; 12.5\(1\) before 12.5\(1\)su6; 14.0 before 14su1; 14.0 before 14su1 |
| CVE-2018-0198 | 5.3 | Mar 27 | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data Affected: All versions, or not specified |
| CVE-2018-0105 | 5.3 | Jan 18 | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data Affected: All versions, or not specified |
| CVE-2021-1406 | 4.9 | Apr 8 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… Affected: 10.5(2); 10.5(2); 10.5(2)su1; 10.5(2)su1; 10.5(2)su2; 10.5(2)su2; +34 more |
| CVE-2021-1364 | 4.9 | Jan 20 | Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL… Affected: before 11.5\(1\)su9; before 11.5\(1\)su9; 12.0 before 12.0\(1\)su4; 12.0 before 12.0\(1\)su4; 12.5 before 12.5\(1\)su4; 12.5 before 12.5\(1\)su4 |
| CVE-2021-1282 | 4.9 | Jan 20 | Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL… Affected: before 11.5\(1\)su9; before 11.5\(1\)su9; 12.0 before 12.0\(1\)su4; 12.0 before 12.0\(1\)su4; 12.5 before 12.5\(1\)su4; 12.5 before 12.5\(1\)su4 |
| CVE-2019-12710 | 4.9 | Oct 2 | A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an… Affected: 10.5(2.10000.5); 11.5(1.10000.6); 12.0(1.10000.10); 12.5(1.10000.22) |
| CVE-2017-3886 | 4.9 | Apr 7 | A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing… Affected: 11.0(1.10000.10); 11.5(1.10000.6) |
| CVE-2022-20862 | 4.3 | Jul 6 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition… Affected: before 12.5\(1\)su6; before 12.5\(1\)su6; 14.0 before 14su2; 14.0 before 14su2 |
| CVE-2021-34701 | 4.3 | Nov 4 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition… Affected: before 14su1; before 14su1 |
| CVE-2021-1399 | 4.3 | Apr 8 | A vulnerability in the Self Care Portal of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME)… Affected: 10.5\(2\) before 12.5\(1\)su4; 10.5\(2\) before 12.5\(1\)su4 |
| CVE-2018-0266 | 4.3 | Apr 19 | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data Affected: 10.5(2.10000.5); 11.0(1.10000.10); 11.5(1.10000.6); 12.0(1.10000.10) |
| CVE-2018-0135 | 4.3 | Feb 8 | A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on an affected system Affected: 11.0(1.24075.1) |