CU
Product
Cisco Unified Communications Manager
On CISA KEVExploited in the wild
24
CVEs
2
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 6High 10Medium 8Low 0
Watch
Add Cisco Unified Communications Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20278 | 6.7 | Jun 4 | Cisco Unified Communications Products Command Injection Vulnerability Affected: 12.5(1)SU2; 12.5(1)SU1; 12.5(1); 12.5(1)SU3; 12.5(1)SU4; 14; +15 more |
| CVE-2020-3532 | 6.1 | Nov 18 | Cisco Unified Communications Products Cross-Site Scripting Vulnerability Affected: All versions, or not specified |
| CVE-2024-20511 | 6.1 | Nov 6 | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability Affected: 12.5(1)SU2; 12.0(1)SU2; 12.0(1)SU3; 12.5(1)SU1; 12.5(1); 12.0(1)SU1; +20 more |
| CVE-2024-20488 | 6.1 | Aug 21 | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability Affected: 12.5(1)SU2; 12.0(1)SU2; 12.0(1)SU3; 12.5(1)SU1; 12.5(1); 12.0(1)SU1; +18 more |
| CVE-2020-3420 | 5.4 | Nov 18 | Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability Affected: All versions, or not specified |
| CVE-2026-76487 | 5.3 | Oct 21 | Cisco Unified Communications Manager Improper Access Control Vulnerability Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2025-20112 | 5.1 | May 21 | Cisco Unified Communications Products Privilege Escalation Vulnerability Affected: 12.5(1)SU2; 12.5(1)SU1; 12.5(1); 12.5(1)SU3; 12.5(1)SU4; 14; +15 more |
| CVE-2025-20361 | 4.8 | Oct 1 | Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability Affected: 12.5(1)SU2; 12.5(1)SU1; 12.5(1); 12.5(1)SU3; 12.5(1)SU4; 14; +16 more |
Showing 8