Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

Ashwesker-CVE-2026-20045

🚨 CVE-2026-20045 — Zero-Day Breakdown 🚨 🧨 What it is A critical remote code execution RCE vulnerability affecting multiple Cisco Unified Communications products. It was actively exploited in the wild before patches were released. 🔥 Why it’s dangerous 🚫 No authentication required 🖥️ Remote code...

Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

On November 4, 2026, the Cisco Product Security Incident Response Team PSIRT will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Identity Services Engine ISE UCS Central Software Unified Communications Manager...

Cisco Unified Communications Products 15SU4 Improper Authentication Detection Tool

Cisco Unified Communications Products versions before 15SU5 contain improper authentication vulnerabilities. This tool performs offline CSV or JSON inventory-based release exposure assessment using a bundled local rule set...

Cisco Unified Communications Products 15SU4 Cross Site Scripting

Cisco Unified Communications Products versions 14 and 15SU4 and earlier contain cross site scripting vulnerabilities. This offline Python tool assesses supplied CSV or JSON release inventory against the affected release policy...

Cisco Unified Communications Products 15 Release Exposure Detector

This tool performs offline release-based exposure assessment of Cisco Unified Communications Products inventory for affected releases and the first fixed release, version 15SU5...

Cisco Emergency Responder Unauthorized Access

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to improper handling of...

Cisco Emergency Responder CVE Privilege Escalation

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to improper handling of...

Cisco Emergency Responder SQL Injection

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to improper handling of SQL...

Cisco Emergency Responder Data Compromise

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call-handling systems, is related to improper handling of web...

Cisco Unified Communications Manager Unauthorized Access

The vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME relates to the use of unsafe methods or functions when processing HTTP requests. Exploitation of this vulnerability may allow a remote attacker t...

Cisco Emergency Responder Access Control

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to access control flaws...

Cisco Emergency Responder Authentication Bypass

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to flaws in the...

Cisco Emergency Responder Path Traversal

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to improper validation of t...

Cisco Emergency Responder Management Data Compromise

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to insufficient input...

Cisco Unified Communications Manager (CUCM) < 15SU5 Improper Access Control (cisco-sa-cucm-access-PW9e8Jt2)

According to its self-reported version, Cisco Unified Communications Manager is affected by an improper access control vulnerability. - A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow...

CVE-2026-76487

A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to improp...

CVE-2026-76481

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...

CVE-2026-76476

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...

CVE-2026-76478

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...