Product by Cisco
Cisco Unity Connection
27 known vulnerabilities in Cisco Unity Connection (Cisco), 1 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-20045 | Cisco Unified Communications Products Remote Code Execution Vulnerability In CISA KEValso in 5 other products | 8.2 | |
| Critical | CVE-2024-20253 | Cisco: Deserialization of Untrusted Data | 9.9 | |
| Critical | CVE-2026-76473 | Cisco: Injection | 9.8 | |
| Critical | CVE-2026-76474 | Cisco: Improper Authentication | 9.8 | |
| High | CVE-2026-76477 | Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities | 8.8 | |
| Critical | CVE-2024-20272 | Cisco Unity Connection: Unrestricted Upload of File with Dangerous Type | 7.3 | |
| High | CVE-2026-76476 | Cisco: Improper Input Validation | 8.8 | |
| High | CVE-2026-20034 | Cisco Unity Connection Remote Code Execution Vulnerability | 8.8 | |
| Medium | CVE-2017-6629 | Cisco Unity Connection: Path Traversal | 5.3 | |
| Critical | CVE-2026-76475 | Cisco: Cross-site Scripting | 9.3 | |
| High | CVE-2026-76481 | Cisco: Improper Check or Handling of Exceptional Conditions | 7.5 | |
| High | CVE-2026-76478 | Cisco: Improper Access Control | 8.8 | |
| High | CVE-2023-20259 | Cisco: Uncontrolled Resource Consumption | 8.6 | |
| Medium | CVE-2018-0203 | Cisco Unity Connection: Data Processing Errors | 5.3 | |
| High | CVE-2026-76479 | Cisco: Path Traversal | 7.8 | |
| Medium | CVE-2017-12212 | Cisco Unity Connection: Cross-site Scripting | 6.1 | |
| Medium | CVE-2019-1685 | Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability | 6.1 | |
| High | CVE-2026-20035 | Cisco Unity Connection Server-Side Request Forgery Vulnerability | 7.2 | |
| Medium | CVE-2026-20081 | Cisco Unity Connection Arbitrary File Download Vulnerability | 6.5 | |
| Medium | CVE-2026-20078 | Cisco Unity Connection Arbitrary File Download Vulnerability | 6.5 | |
| Medium | CVE-2026-20061 | Cisco Unity Connection SQL Injection Vulnerability | 6.5 | |
| High | CVE-2023-20266 | Cisco Emergency Responder: Improper Verification of Cryptographic Signature | 6.5 | |
| Medium | CVE-2026-20059 | Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability | 6.1 | |
| Medium | CVE-2026-20060 | Cisco Unity Connection Open Redirect Vulnerability | 4.7 | |
| Medium | CVE-2025-20278 | Cisco Unified Communications Products Command Injection Vulnerability | 6.0 |
News
- Cisco Publishes Nine Security Advisoriessans-newsbites-mail,
- Cisco Unity Connection Arbitrary File Download Vulnerabilitiescisco-psirt
- Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilitiescisco-psirt
- Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilitiescisco-psirt
- Cisco Unified Communications Products Security Hardening Release: October 2026cisco-psirt