Product by Cisco
Cisco Session Initiation Protocol (sip) Software
13 known vulnerabilities in Cisco Session Initiation Protocol (sip) Software (Cisco), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-20968 | Cisco Session Initiation Protocol (SIP) Software: Out-of-bounds Write | 8.1 | |
| High | CVE-2026-20281 | Cisco Session Initiation Protocol (SIP) Software: Missing Release of Memory after Effective Lifetime | 7.5 | |
| High | CVE-2023-20018 | Cisco Session Initiation Protocol (SIP) Software: Authentication Bypass Using an Alternate Path or Channel | 8.6 | |
| High | CVE-2025-20350 | Cisco Session Initiation Protocol (SIP) Software: Stack-based Buffer Overflow | 7.5 | |
| High | CVE-2025-20336 | Cisco Session Initiation Protocol (SIP) Software: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2025-20351 | Cisco Session Initiation Protocol (SIP) Software: Cross-site Scripting | 6.1 | |
| Medium | CVE-2024-20445 | Cisco IP Phone 7800, 8800, and 9800 Series Information Disclosure Vulnerability | 5.3 | |
| Medium | CVE-2021-1379 | Cisco IP Phones with Multiplatform Firmware: Classic Buffer Overflow | 6.5 | |
| Medium | CVE-2023-20265 | Cisco IP Phones with Multiplatform Firmware: Cross-site Scripting | 5.5 | |
| Medium | CVE-2025-20335 | Cisco Session Initiation Protocol (SIP) Software: Improper Access Control | 5.3 | |
| Medium | CVE-2024-20534 | Cisco IP Phones with Multiplatform Firmware: Cross-site Scripting | 4.8 | |
| Medium | CVE-2024-20533 | Cisco IP Phones with Multiplatform Firmware: Cross-site Scripting | 4.8 | |
| Medium | CVE-2025-20158 | Cisco Video Phone 8875 and Desk Phone 9800 Series Information Disclosure Vulnerability | 4.4 |