Unified Communications Manager
244 CVEs tracked. 3 of them are in CISA KEV.
This hub aggregates every CVE we track for Unified Communications Manager, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
Unified Communications Manager CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 2 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 1 |
| 2025-07 | 1 |
| 2025-08 | 0 |
| 2025-09 | 1 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 1 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 1 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 244 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical13
- High76
- Medium153
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Unified Communications Manager.
- CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability8.6
- CVE-2026-20045Cisco Unified Communications Products Remote Code Execution Vulnerability8.2
- CVE-2025-20326Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability4.3
- CVE-2025-20309Cisco Unified Communications Manager Static SSH Credentials Vulnerability10.0
- CVE-2025-20278Cisco Unified Communications Products Command Injection Vulnerability6.0
- CVE-2020-3420Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability5.4
- CVE-2024-20511Cisco Unified Communications Manager Cross-Site Scripting Vulnerability6.1
- CVE-2024-20488Cisco Unified Communications Manager Cross-Site Scripting Vulnerability6.1
- CVE-2024-20375A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could a...8.6
- CVE-2024-20253A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This ...9.9
- CVE-2023-20259A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the ...8.6
- CVE-2023-20266A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Co...6.5
- CVE-2023-20211A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could...8.1
- CVE-2023-20242A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communica...4.8
- CVE-2023-20116A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM ...6.8
Product grouping is registry-driven, with AI assist and human review. How it works