Unified Communications Manager vulnerabilities | LiveThreat CVE Feed

Product

Unified Communications Manager

by Cisco · last CVE Jun 3, 2026

On CISA KEVExploited in the wild

238

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities238 In the news7 Timeline

Severity mix

Critical 4High 24Medium 75Low 0

Severity

All severities238 Critical4 High24 Medium75 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Unified Communications Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2010-2837	–	1%	Aug 26	The SIPStationInit implementation in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.1SU before 6.1(5)SU1, 7.0SU before 7.0(2a)SU3, 7.1SU before… Affected: through 6.1\(5\); 6.1(1); 6.1(1a); 6.1(1b); 6.1(2); 6.1(2)su1; +34 more
CVE-2010-0592	–	3%	Mar 5	The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)sr1a, 6.x before 6.1(3), 7.0x before 7.0(2), 7.1x before 7.1(2),… Affected: 4.1; 4.1; 4.1; 4.1; 4.1; 4.1; +34 more
CVE-2010-0591	–	2%	Mar 5	Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x before 8.0(1) allows remote attackers to cause a denial of… Affected: 6.0; 6.0(1); 6.0(1a); 6.1; 6.1(1); 6.1(1a); +12 more
CVE-2010-0590	–	3%	Mar 5	The CMSIPUtility component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(3a)su1 and 8.x before 8.0(1) allows remote attackers to cause a… Affected: 7.0; 7.0(1); 7.0(2); 7.1; 8.0
CVE-2010-0588	–	2%	Mar 5	Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of… Affected: 6.0; 6.0(1); 6.0(1a); 6.1; 6.1; 6.1(1); +13 more
CVE-2010-0587	–	3%	Mar 5	Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)SR2, 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers… Affected: 4.1; 4.1; 4.1; 4.1; 4.1; 4.1; +34 more
CVE-2009-2864	–	3%	Sep 28	Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote… Affected: 5.1(1b); 5.1(1c); 5.1(2); 5.1(2a); 5.1(3); 5.1(3a); +13 more
CVE-2009-2054	–	3%	Aug 27	Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2a)su1 allows remote… Affected: 4.0 before 5.1\(3g\); 6.0 before 6.1\(4\); 7.0 before 7.0\(2a\)su1; 7.1 before 7.1\(2a\)su1
CVE-2009-2053	–	3%	Aug 27	Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2) allows remote… Affected: 5.0 before 5.1\(3g\); 6.1\(1\) before 6.1\(4\); 7.0 before 7.0\(2a\)su1; 7.1 before 7.1\(2\)
CVE-2009-2052	–	4%	Aug 27	Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2), and 7.1 before 7.1(2); and Cisco Unified… Affected: 5.0 before 5.1\(3g\); 6.1\(1\) before 6.1\(4\); 7.0 before 7.0\(2\); 7.1 before 7.1\(2\)
CVE-2009-2051	–	3%	Aug 27	Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x… Affected: 5.0 before 5.1\(3g\); 6.1\(1\) before 6.1\(4\); 7.1 before 7.1\(2\)
CVE-2009-2050	–	3%	Aug 27	Cisco Unified Communications Manager (aka CUCM, formerly CallManager) before 6.1(1) allows remote attackers to cause a denial of service (voice-services outage) via a malformed… Affected: before 6.1\(1\)
CVE-2009-0632	–	3%	Mar 12	The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 before 4.2(3)SR4b, 4.3 before… Affected: 4.1; 4.2; 4.2(3)sr1; 4.2(3)sr2b; 4.2(3)sr3; 4.2(3)sr4; +24 more
CVE-2009-0057	–	1%	Jan 22	The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial… Affected: 5.0; 5.0_1; 5.0_2; 5.0_3; 5.0_3a; 5.0_4; +30 more
CVE-2008-3801	–	3%	Sep 26	Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is… Affected: 4.1; 5.0; 5.1; 6.1
CVE-2008-3800	–	4%	Sep 26	Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is… Affected: 4.1; 5.0; 5.1; 6.1
CVE-2008-2730	–	2%	Jun 26	The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to… Affected: 5.1; 6.1
CVE-2008-2062	–	2%	Jun 26	The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to… Affected: 4.2 before 4.2\(3\)sr4; 4.3 before 4.3\(2\)sr1; 5.0 before 5.1\(3c\); 6.0 before 6.1\(2\)
CVE-2008-2061	–	2%	Jun 26	The Computer Telephony Integration (CTI) Manager service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3c) and 6.x before 6.1(2) allows remote attackers to cause a… Affected: 5.0 before 5.1\(3c\); 6.0 before 6.1\(2\)
CVE-2008-1748	–	2%	May 16	Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs,… Affected: 4.1 before 4.1\(3\)sr7; 4.2 before 4.2\(3\)sr4; 4.3 before 4.3\(2\); 5.0 before 5.1\(3\); 6.0 before 6.1\(1\)
CVE-2008-1747	–	2%	May 16	Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows… Affected: 4.1 before 4.1\(3\)sr6; 4.2 before 4.2\(3\)sr3; 4.3 before 4.3\(2\); 5.0 before 5.1\(3\); 6.0 before 6.1\(1\)
CVE-2008-1746	–	2%	May 16	The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1)… Affected: 4.1; 4.1; 4.1; 4.1; 4.1; 4.1; +12 more
CVE-2008-1745	–	2%	May 16	Cisco Unified Communications Manager (CUCM) 5.x before 5.1(2) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (service interruption) via a SIP JOIN… Affected: 4.1; 4.1; 4.1; 4.1; 4.1; 4.1; +15 more
CVE-2008-1744	–	1%	May 16	The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows… Affected: 4.2_3_sr2; 4.2_3_sr2b; 4.2_3_sr3; 4.3; 4.3_1_sr1; 5.1_1; +9 more
CVE-2008-1743	–	1%	May 16	Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to… Affected: 5.0 before 5.1\(3\); 6.0 before 6.1\(1\)
CVE-2008-1742	–	1%	May 16	Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) allows remote attackers to cause a denial of… Affected: 4.1; 4.2; 4.3; 5.1; 5.1; 5.1; +7 more
CVE-2008-1154	–	5%	Apr 4	The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and… Affected: 5.0; 5.1; 6.0; 6.1
CVE-2008-0026	–	2%	Feb 14	SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to… Affected: 5.0; 5.0_1; 5.0_2; 5.0_3; 5.0_3a; 5.0_4; +5 more
CVE-2008-0027	–	57%	Jan 17	Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3… Affected: 4.2; 4.2.3sr2; 4.2.3sr2b; 4.3
CVE-2007-5538	–	6%	Oct 18	Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0,… Affected: through 5.1\(2\)
CVE-2007-5537	–	2%	Oct 18	Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(2), and Unified CallManager 5.0, allow remote attackers to cause a denial of service (kernel… Affected: through 5.1\(2\)
CVE-2007-4634	–	4%	Aug 31	Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before… Affected: 3.3(5); 3.3(5)sr1; 3.3(5)sr2a; 4.1(3); 4.1(3)sr1; 4.1(3)sr2; +9 more
CVE-2007-4633	–	1%	Aug 31	Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2,… Affected: 4.2.3sr2; 4.2.3sr2b
CVE-2007-4294	–	3%	Aug 9	Unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a… Affected: 5.0; 5.1; 6.0
CVE-2007-3776	–	1%	Jul 15	Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote attackers to obtain sensitive information via unspecified vectors… Affected: 5.0; 5.1(1); 5.1(2)
CVE-2007-3775	–	2%	Jul 15	Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allows remote attackers to cause a denial of… Affected: 5.0; 5.1(1); 5.1(2)
CVE-2006-5278	–	9%	Jul 15	Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711… Affected: 4.3 through 4.3\(1\)
CVE-2006-5277	–	10%	Jul 15	Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow… Affected: 4.3 through 4.3\(1\); 5.1 through 5.1\(1\)