Login Request a demo
CU
Product
Cisco Unified Communications Manager IM and Presence Service
by Cisco · last CVE Oct 21, 2026
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
10.0
Max CVSS
8
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 5High 10Medium 8Low 0
Severity
All severities23Critical5High10Medium8Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Cisco Unified Communications Manager IM and Presence Service to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-76478
8.8
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU2a; 14SU3; 15; +7 more
CVE-2026-76476
8.8
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU2a; 14SU3; 15; +7 more
CVE-2026-76477
8.8
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU2a; 14SU3; 15; +7 more
CVE-2022-20786
8.1
1%
Apr 21
Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability
Affected: All versions, or not specified
CVE-2021-1363
8.1
1%
May 6
Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
Affected: All versions, or not specified
CVE-2021-1365
8.1
1%
May 6
Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
Affected: All versions, or not specified
CVE-2026-76479
7.8
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU2a; 14SU3; 15; +7 more
CVE-2026-76481
7.5
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU2a; 14SU3; 15; +7 more
CVE-2023-20259
7.5
1%
Oct 4
A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could…
Affected: 12.5(1)SU7; 14SU3
CVE-2023-20108
7.5
1%
Jun 28
A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated,…
Affected: 10.5(1); 10.5(2); 10.5(2a); 10.5(2b); 10.5(2)SU3; 10.5(2)SU2a; +34 more
Showing 10