Cisco Cisco Unity Connection
39 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76481 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities | HIGH 7.5 | 0.5 % | ||
| CVE-2026-76479 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities | HIGH 7.8 | 0.2 % | ||
| CVE-2026-76478 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities | HIGH 8.8 | 0.1 % | ||
| CVE-2026-76476 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76477 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities | HIGH 8.8 | 0.5 % | ||
| CVE-2026-76475 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities | CRITICAL 9.3 | 0.3 % | ||
| CVE-2026-76474 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-76473 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-20034 | 12.5(1) ; 12.5(1)SU1 ; 12.5(1)SU2 ; … | Cisco Unity Connection Remote Code Execution Vulnerability | HIGH 8.8 | 0.7 % | ||
| CVE-2026-20035 | 12.5(1) ; 12.5(1)SU1 ; 12.5(1)SU2 ; … | Cisco Unity Connection Server-Side Request Forgery Vulnerability | HIGH 7.2 | 0.3 % | ||
| CVE-2026-20059 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-20061 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unity Connection SQL Injection Vulnerability | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-20060 | 14 ; 14SU1 ; 14SU2 ; … | Cisco Unity Connection Open Redirect Vulnerability | MEDIUM 4.7 | 0.2 % | ||
| CVE-2026-20081 | 12.5(1) ; 12.5(1)SU1 ; 12.5(1)SU2 ; … | Cisco Unity Connection Arbitrary File Download Vulnerability | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-20078 | 12.5(1) ; 12.5(1)SU1 ; 12.5(1)SU2 ; … | Cisco Unity Connection Arbitrary File Download Vulnerability | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-20045 | 12.5(1) ; 12.5(1)SU1 ; 12.5(1)SU2 ; … | Cisco Unified Communications Products Remote Code Execution Vulnerability | CRITICAL 9.8 | 4.5 % | KEV | |
| CVE-2025-20278 | | Cisco Unified Communications Products Command Injection Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20112 | | Cisco Unified Communications Products Privilege Escalation Vulnerability | MEDIUM 5.1 | 0.1 % | ||
| CVE-2020-3532 | N/A | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.5 % | ||
| CVE-2024-20253 | 12.0(1)SU1 ; 12.0(1)SU2 ; 12.0(1)SU3 ; … | A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attack | CRITICAL 10.0 | 2.4 % | ||
| CVE-2024-20305 | 12.0(1)SU1 ; 12.0(1)SU2 ; 12.0(1)SU3 ; … | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a c | MEDIUM 4.8 | 0.4 % | ||
| CVE-2024-20272 | 12.0(1)SU1 ; 12.0(1)SU2 ; 12.0(1)SU3 ; … | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload ar | CRITICAL 9.8 | 1.6 % | ||
| CVE-2023-20259 | 14SU3 | A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to caus | HIGH 8.6 | 0.8 % | ||
| CVE-2023-20266 | 12.5(1)SU6 ; 12.5(1)SU7 ; 12.5(1)SU8 ; … | A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Sessio | HIGH 7.2 | 0.5 % | ||
| CVE-2022-20800 | n/a | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.8 % | ||
| CVE-2021-34701 | n/a | Cisco Unified Communications Products Path Traversal Vulnerability | MEDIUM 4.3 | 1.6 % | ||
| CVE-2021-1409 | n/a | Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities | MEDIUM 6.1 | 0.9 % | ||
| CVE-2021-1408 | n/a | Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities | MEDIUM 6.1 | 0.9 % | ||
| CVE-2021-1407 | n/a | Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities | MEDIUM 6.1 | 0.9 % | ||
| CVE-2021-1380 | n/a | Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities | MEDIUM 6.1 | 0.9 % | ||
| CVE-2021-1362 | n/a | Cisco Unified Communications Products Remote Code Execution Vulnerability | HIGH 8.8 | 2.8 % | ||
| CVE-2019-15963 | n/a | Cisco Unified Communications Manager Information Disclosure Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2020-3130 | n/a | Cisco Unity Connection Directory Traversal Vulnerability | MEDIUM 6.5 | 1.8 % | ||
| CVE-2020-3282 | n/a | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.8 % | ||
| CVE-2020-3129 | unspecified – < n/a | Cisco Unity Connection Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.6 % | ||
| CVE-2019-12707 | unspecified – < n/a | Multiple Cisco Unified Communications Products Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 1.1 % | ||
| CVE-2019-1685 | 12.5 | Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 1.2 % | ||
| CVE-2018-15426 | n/a | Cisco Unity Connection Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.9 % | ||
| CVE-2018-15396 | n/a | Cisco Unity Connection File Upload Denial of Service Vulnerability | MEDIUM 6.8 | 1.8 % |