Cisco Unified Communications Manager Im And Presence Service — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Unified Communications Manager Im And Presence Service, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (39)

CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
CVE-2024-20253 — CVSS 9.9 (critical): A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote…
CVE-2017-12337 — CVSS 9.8 (critical): A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could…
CVE-2018-0363 — CVSS 8.8 (high): A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (formerly CUPS) could…
CVE-2019-1845 — CVSS 8.6 (high): A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service…
CVE-2026-20045 — CVSS 8.2 (high) — actively exploited: A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition…
CVE-2016-1466 — CVSS 7.5 (high): Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1…
CVE-2023-20108 — CVSS 7.5 (high): A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM…
CVE-2018-0409 — CVSS 7.5 (high): A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco…
CVE-2016-6464 — CVSS 7.5 (high): A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an…
CVE-2021-1365 — CVSS 7.1 (high): Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could…
CVE-2021-1363 — CVSS 7.1 (high): Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could…
CVE-2021-1357 — CVSS 6.5 (medium): Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to…
CVE-2015-4222 — CVSS 6.5 (medium): SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to…
CVE-2019-1915 — CVSS 6.5 (medium): A vulnerability in the web-based interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management…
CVE-2021-1282 — CVSS 6.5 (medium): Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to…
CVE-2021-1355 — CVSS 6.5 (medium): Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to…
CVE-2021-1364 — CVSS 6.5 (medium): Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to…
CVE-2021-34773 — CVSS 6.5 (medium): A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications…
CVE-2022-20791 — CVSS 6.5 (medium): A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager…
CVE-2022-20859 — CVSS 6.5 (medium): A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications…
CVE-2024-20457 — CVSS 6.5 (medium): A vulnerability in the logging component of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could…
CVE-2024-20310 — CVSS 6.1 (medium): A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an…
CVE-2018-0396 — CVSS 6.1 (medium): A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an…
CVE-2022-20800 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications…
CVE-2022-20815 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session…
CVE-2025-20330 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM…
CVE-2020-3282 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session…
CVE-2019-12707 — CVSS 6.1 (medium): A vulnerability in the web-based interface of multiple Cisco Unified Communications products could allow an unauthenticated, remote…
CVE-2025-20278 — CVSS 6.0 (medium): A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute…
CVE-2018-15403 — CVSS 5.4 (medium): A vulnerability in the web interface of Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified Communications…
CVE-2022-20786 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM…
CVE-2014-8000 — CVSS 5.0 (medium): Cisco Unified Communications Manager IM and Presence Service 9.1(1) produces different returned messages for URL requests depending on…
CVE-2015-6310 — CVSS 5.0 (medium): The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of…
CVE-2023-20242 — CVSS 4.8 (medium): A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session…
CVE-2015-4294 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web…
CVE-2020-27121 — CVSS 4.3 (medium): A vulnerability in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) Software could allow an…
CVE-2021-34701 — CVSS 4.3 (medium): A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications…
CVE-2015-4221 — CVSS 4.0 (medium): Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows…