Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

CVE-2026-76419

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

CVE-2026-76419 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

EUVD-2026-116972

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

CVE-2026-76419

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) allows an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The root cause...

CVE-2026-76419: Cisco Cisco Unified Communications Manager: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco…

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

Ashwesker-CVE-2026-20045

🚨 CVE-2026-20045 — Zero-Day Breakdown 🚨 🧨 What it is A critical remote code execution RCE vulnerability affecting multiple Cisco Unified Communications products. It was actively exploited in the wild before patches were released. 🔥 Why it’s dangerous 🚫 No authentication required 🖥️ Remote code...

Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

On November 4, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco UCS Central Software Remote Code Execution Vulnerability...

Cisco Unified Communications Products 15SU4 Improper Authentication Detection Tool

Cisco Unified Communications Products versions before 15SU5 contain improper authentication vulnerabilities. This tool performs offline CSV or JSON inventory-based release exposure assessment using a bundled local rule set...

Cisco Unified Communications Products 15SU4 Cross Site Scripting

Cisco Unified Communications Products versions 14 and 15SU4 and earlier contain cross site scripting vulnerabilities. This offline Python tool assesses supplied CSV or JSON release inventory against the affected release policy...

Cisco Unified Communications Products 15 Release Exposure Detector

This tool performs offline release-based exposure assessment of Cisco Unified Communications Products inventory for affected releases and the first fixed release, version 15SU5...

Cisco Emergency Responder Data Compromise

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call-handling systems, is related to improper handling of web...

Cisco Unified Communications Manager Unauthorized Access

The vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME relates to the use of unsafe methods or functions when processing HTTP requests. Exploitation of this vulnerability may allow a remote attacker t...

Cisco Emergency Responder CVE Privilege Escalation

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to improper handling of...

Cisco Emergency Responder SQL Injection

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to improper handling of SQL...

Cisco Emergency Responder Unauthorized Access

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to improper handling of...

Cisco Emergency Responder Access Control

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to access control flaws...

Cisco Emergency Responder Authentication Bypass

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to flaws in the...

Cisco Emergency Responder Path Traversal

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to improper validation of t...

Cisco Emergency Responder Management Data Compromise

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to insufficient input...