Cisco Cisco Unified Communications Manager IM and Presence Service

• CVE-2026-20045 High 8.2 Exploited Cisco Unified Communications Products Remote Code Execution Vulnerability 4.5%
• CVE-2026-76481 High 7.5 Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities 0.5%
• CVE-2026-76479 High 7.8 Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities 0.2%
• CVE-2026-76478 High 8.8 Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities 0.1%
• CVE-2026-76476 High 8.8 Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities 0.4%
• CVE-2026-76477 High 8.8 Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities 0.5%
• CVE-2026-76475 Critical 9.3 Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities 0.3%
• CVE-2026-76474 Critical 9.8 Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities 0.5%
• CVE-2026-76473 Critical 9.8 Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. 0.5%
• CVE-2025-20330 Medium 6.1 Cisco Unified Communications Manager IM and Presence Cross-Site Scripting Vulnerability 0.3%
• CVE-2025-20278 Medium 6.0 Cisco Unified Communications Products Command Injection Vulnerability 0.2%
• CVE-2025-20112 Medium 5.1 Cisco Unified Communications Products Privilege Escalation Vulnerability 0.1%
• CVE-2020-3532 Medium 6.1 Cisco Unified Communications Products Cross-Site Scripting Vulnerability 0.5%
• CVE-2024-20457 Medium 6.5 Cisco Unified Communications Manager IM & Presence Service Information Disclosure Vulnerability 0.4%
• CVE-2024-20310 Medium 6.1 A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scrip 0.5%
• CVE-2024-20253 Critical 9.9 A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vul 2.4%
• CVE-2023-20259 High 8.6 A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web 0.8%
• CVE-2023-20242 Medium 4.8 A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communicatio 0.5%
• CVE-2023-20108 High 7.5 A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to cause a 0.9%
• CVE-2022-20786 Medium 5.4 Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability 0.8%
• CVE-2021-1363 High 7.1 Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities 1.1%
• CVE-2021-1365 High 7.1 Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities 1.1%
• CVE-2020-27121 Medium 4.3 Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability 1.2%