Product by Cisco
Cisco Unified Communications Manager
57 known vulnerabilities in Cisco Unified Communications Manager (Cisco), 2 of them actively exploited (CISA KEV).
Key figures
57
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability In CISA KEValso in 1 other product | 8.6 | |
| Critical | CVE-2026-20045 | Cisco Unified Communications Products Remote Code Execution Vulnerability In CISA KEValso in 5 other products | 8.2 | |
| Critical | CVE-2024-20253 | Cisco: Deserialization of Untrusted Data | 9.9 | |
| High | CVE-2016-6464 | Cisco Unified Communications Manager: security vulnerability | 7.5 | |
| Medium | CVE-2017-6758 | Cisco Unified Communications Manager: Path Traversal | 6.5 | |
| Critical | CVE-2025-20309 | Cisco Unified Communications Manager Static SSH Credentials Vulnerability | 10.0 | |
| High | CVE-2017-3808 | Cisco Unified Communications Manager: Improper Restriction of Operations within the Bounds of a Memory Buffer | 7.5 | |
| High | CVE-2017-6791 | Cisco Unified Communications Manager: Improper Restriction of Operations within the Bounds of a Memory Buffer | 7.5 | |
| Critical | CVE-2026-76473 | Cisco: Injection | 9.8 | |
| Critical | CVE-2026-76474 | Cisco: Improper Authentication | 9.8 | |
| High | CVE-2019-1887 | Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability | 8.6 | |
| High | CVE-2017-6757 | Cisco Unified Communications Manager: SQL Injection | 8.8 | |
| High | CVE-2026-76477 | Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities | 8.8 | |
| High | CVE-2026-76476 | Cisco: Improper Input Validation | 8.8 | |
| High | CVE-2019-1837 | Cisco Unified Communications Manager Denial of Service Vulnerability | 5.3 | |
| Critical | CVE-2026-76475 | Cisco: Cross-site Scripting | 9.3 | |
| High | CVE-2026-76481 | Cisco: Improper Check or Handling of Exceptional Conditions | 7.5 | |
| Medium | CVE-2018-0118 | Cisco Unified Communications Manager: Cross-site Scripting | 6.1 | |
| Medium | CVE-2017-12258 | Cisco Unified Communications Manager: Link Following | 6.1 | |
| Medium | CVE-2017-6654 | Cisco Unified Communications Manager: Cross-site Scripting | 6.1 | |
| Medium | CVE-2026-76487 | Cisco Unified Communications Manager Improper Access Control Vulnerability | 5.3 | |
| Medium | CVE-2017-3821 | Cisco Unified Communications Manager: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2017-3828 | Cisco Unified Communications Manager: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2017-3829 | Cisco Unified Communications Manager: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2017-3886 | Cisco Unified Communications Manager: SQL Injection | 4.9 |
News
- Cisco Unified Communications Products Security Hardening Release: October 2026cisco-psirt,
- Cisco Unified Communications Manager Improper Access Control Vulnerabilitycisco-psirt,
- The hits keep on coming for Cisco vulnerabilitiestheregister-security,
- Attackers exploit Cisco Unified CM flaw weeks after patch releasecsoonline,
- Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Rootthehackernews,
- Hackers Exploiting Cisco Unified CM Vulnerabilitysecurityweek,