CU
Product
Cisco Unified Communications Manager
On CISA KEVExploited in the wild
22
CVEs
2
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 5High 9Medium 8Low 0
Watch
Add Cisco Unified Communications Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20045 In wildKEV | 9.8 | Jan 21 | Cisco Unified Communications Products Remote Code Execution Vulnerability Affected: 12.5(1)SU2; 12.5(1)SU1; 12.5(1); 12.5(1)SU3; 12.5(1)SU4; 14; +25 more |
| CVE-2026-20230 In wildKEV | 8.6 | Jun 3 | Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +16 more |
| CVE-2025-20309 | 10.0 | Jul 2 | Cisco Unified Communications Manager Static SSH Credentials Vulnerability Affected: 15.0.1.13010-1; 15.0.1.13011-1; 15.0.1.13012-1; 15.0.1.13013-1; 15.0.1.13014-1; 15.0.1.13015-1; +2 more |
| CVE-2026-76474 | 9.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2026-76473 | 9.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2026-76475 | 9.3 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2026-76478 | 8.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2026-76476 | 8.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2026-76477 | 8.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2025-20326 | 8.8 | Sep 3 | Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability Affected: 12.5(1)SU2; 12.5(1)SU1; 12.5(1); 12.5(1)SU3; 12.5(1)SU4; 14; +16 more |
| CVE-2022-20816 | 8.1 | Aug 10 | Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability Affected: All versions, or not specified |
| CVE-2026-76479 | 7.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2026-76481 | 7.5 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2024-20375 | 7.5 | Aug 21 | A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition… Affected: 12.0(1)SU1; 12.0(1)SU2; 12.0(1)SU3; 12.0(1)SU4; 12.0(1)SU5; 12.5(1); +15 more |
| CVE-2025-20278 | 6.7 | Jun 4 | Cisco Unified Communications Products Command Injection Vulnerability Affected: 12.5(1)SU2; 12.5(1)SU1; 12.5(1); 12.5(1)SU3; 12.5(1)SU4; 14; +15 more |
| CVE-2020-3532 | 6.1 | Nov 18 | Cisco Unified Communications Products Cross-Site Scripting Vulnerability Affected: All versions, or not specified |
| CVE-2024-20511 | 6.1 | Nov 6 | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability Affected: 12.5(1)SU2; 12.0(1)SU2; 12.0(1)SU3; 12.5(1)SU1; 12.5(1); 12.0(1)SU1; +20 more |
| CVE-2024-20488 | 6.1 | Aug 21 | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability Affected: 12.5(1)SU2; 12.0(1)SU2; 12.0(1)SU3; 12.5(1)SU1; 12.5(1); 12.0(1)SU1; +18 more |
| CVE-2020-3420 | 5.4 | Nov 18 | Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability Affected: All versions, or not specified |
| CVE-2026-76487 | 5.3 | Oct 21 | Cisco Unified Communications Manager Improper Access Control Vulnerability Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2025-20112 | 5.1 | May 21 | Cisco Unified Communications Products Privilege Escalation Vulnerability Affected: 12.5(1)SU2; 12.5(1)SU1; 12.5(1); 12.5(1)SU3; 12.5(1)SU4; 14; +15 more |
| CVE-2025-20361 | 4.8 | Oct 1 | Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability Affected: 12.5(1)SU2; 12.5(1)SU1; 12.5(1); 12.5(1)SU3; 12.5(1)SU4; 14; +16 more |
Showing 22