Product by Cisco

    Cisco Unity Connection

    27 known vulnerabilities in Cisco Unity Connection (Cisco), 1 of them actively exploited (CISA KEV).

    Key figures

    27

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cisco Unity Connection (Cisco)
    CriticalCVE-2026-20045

    Cisco Unified Communications Products Remote Code Execution Vulnerability

    In CISA KEValso in 5 other products

    8.2
    CriticalCVE-2024-20253

    Cisco: Deserialization of Untrusted Data

    also in 11 other products

    9.9
    CriticalCVE-2026-76473

    Cisco: Injection

    also in 3 other products

    9.8
    CriticalCVE-2026-76474

    Cisco: Improper Authentication

    also in 3 other products

    9.8
    HighCVE-2026-76477

    Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities

    also in 3 other products

    8.8
    CriticalCVE-2024-20272

    Cisco Unity Connection: Unrestricted Upload of File with Dangerous Type

    also in 1 other product

    7.3
    HighCVE-2026-76476

    Cisco: Improper Input Validation

    also in 3 other products

    8.8
    HighCVE-2026-20034

    Cisco Unity Connection Remote Code Execution Vulnerability

    also in 1 other product

    8.8
    MediumCVE-2017-6629

    Cisco Unity Connection: Path Traversal

    also in 1 other product

    5.3
    CriticalCVE-2026-76475

    Cisco: Cross-site Scripting

    also in 3 other products

    9.3
    HighCVE-2026-76481

    Cisco: Improper Check or Handling of Exceptional Conditions

    also in 3 other products

    7.5
    HighCVE-2026-76478

    Cisco: Improper Access Control

    also in 3 other products

    8.8
    HighCVE-2023-20259

    Cisco: Uncontrolled Resource Consumption

    also in 9 other products

    8.6
    MediumCVE-2018-0203

    Cisco Unity Connection: Data Processing Errors

    also in 1 other product

    5.3
    HighCVE-2026-76479

    Cisco: Path Traversal

    also in 3 other products

    7.8
    MediumCVE-2017-12212

    Cisco Unity Connection: Cross-site Scripting

    also in 1 other product

    6.1
    MediumCVE-2019-1685

    Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability

    also in 1 other product

    6.1
    HighCVE-2026-20035

    Cisco Unity Connection Server-Side Request Forgery Vulnerability

    also in 1 other product

    7.2
    MediumCVE-2026-20081

    Cisco Unity Connection Arbitrary File Download Vulnerability

    also in 1 other product

    6.5
    MediumCVE-2026-20078

    Cisco Unity Connection Arbitrary File Download Vulnerability

    also in 1 other product

    6.5
    MediumCVE-2026-20061

    Cisco Unity Connection SQL Injection Vulnerability

    also in 1 other product

    6.5
    HighCVE-2023-20266

    Cisco Emergency Responder: Improper Verification of Cryptographic Signature

    also in 5 other products

    6.5
    MediumCVE-2026-20059

    Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability

    also in 1 other product

    6.1
    MediumCVE-2026-20060

    Cisco Unity Connection Open Redirect Vulnerability

    also in 1 other product

    4.7
    MediumCVE-2025-20278

    Cisco Unified Communications Products Command Injection Vulnerability

    also in 15 other products

    6.0

    All vulnerabilities in search

    News

    All products by Cisco