CU
Product
Cisco Unity Connection
On CISA KEVExploited in the wild
20
CVEs
1
On KEV
9.8
Max CVSS
8
New 30D
Severity mix
Critical 4High 7Medium 9Low 0
Watch
Add Cisco Unity Connection to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20278 | 6.7 | Jun 4 | Cisco Unified Communications Products Command Injection Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +13 more |
| CVE-2026-20061 | 6.5 | Apr 15 | Cisco Unity Connection SQL Injection Vulnerability Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +5 more |
| CVE-2026-20081 | 6.5 | Apr 15 | Cisco Unity Connection Arbitrary File Download Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +16 more |
| CVE-2026-20078 | 6.5 | Apr 15 | Cisco Unity Connection Arbitrary File Download Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +16 more |
| CVE-2026-20059 | 6.1 | Apr 15 | Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +6 more |
| CVE-2020-3532 | 6.1 | Nov 18 | Cisco Unified Communications Products Cross-Site Scripting Vulnerability Affected: All versions, or not specified |
| CVE-2019-1685 | 6.1 | Feb 21 | Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability Affected: 12.5 |
| CVE-2025-20112 | 5.1 | May 21 | Cisco Unified Communications Products Privilege Escalation Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +13 more |
| CVE-2026-20060 | 4.7 | Apr 15 | Cisco Unity Connection Open Redirect Vulnerability Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +4 more |
Showing 9