Cisco
Cisco Unified Communications Manager: vulnerabilidades y CVE
Cisco Unified Communications Manager tiene 241 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 5 son críticas y 3 figuran en el catálogo de explotación activa de CISA.
CVE241
Últimos 12 meses2
Críticas5
Explotadas activamente3
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-20230 | Alta (8.6) | 88% | ⚠ Explotación activa | 3 jun 2026 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct… |
| CVE-2026-20045 | Crítica (9.8) | 4.5% | ⚠ Explotación activa | 21 ene 2026 | — |
| CVE-2021-44228 | Crítica (10) | 100% | ⚠ Explotación activa | 10 dic 2021 | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-20230 | Alta (8.6) | 88% | ⚠ Explotación activa | 3 jun 2026 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct… |
| CVE-2026-20045 | Crítica (9.8) | 4.5% | ⚠ Explotación activa | 21 ene 2026 | — |
| CVE-2025-20361 | Media (4.8) | 0.22% | — | 1 oct 2025 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… |
| CVE-2025-20326 | Alta (8.8) | 0.18% | — | 3 sept 2025 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management Edition (SME) Software could allow an unauthenticated, remote… |
| CVE-2025-20309 | Crítica (10) | 1.2% | — | 2 jul 2025 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to log in to an… |
| CVE-2025-20278 | Media (6.7) | 0.18% | — | 4 jun 2025 | A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the… |
| CVE-2020-3532 | Media (6.1) | 0.50% | — | 18 nov 2024 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM… |
| CVE-2020-3420 | Media (5.4) | 0.42% | — | 18 nov 2024 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… |
| CVE-2024-20511 | Media (6.1) | 0.32% | — | 6 nov 2024 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… |
| CVE-2024-20488 | Media (6.1) | 0.37% | — | 21 ago 2024 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… |
| CVE-2024-20375 | Alta (7.5) | 0.74% | — | 21 ago 2024 | A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… |
| CVE-2024-20253 | Crítica (10) | 2.4% | — | 26 ene 2024 | A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due… |
| CVE-2023-20259 | Alta (7.5) | 0.81% | — | 4 oct 2023 | A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management… |
| CVE-2023-20266 | Alta (7.2) | 0.49% | — | 30 ago 2023 | A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow… |
| CVE-2023-20211 | Alta (8.8) | 0.79% | — | 16 ago 2023 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… |
| CVE-2023-20242 | Media (6.1) | 0.49% | — | 16 ago 2023 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM &… |
| CVE-2023-20116 | Media (5.7) | 0.60% | — | 28 jun 2023 | A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… |
| CVE-2023-20010 | Alta (8.8) | 0.90% | — | 20 ene 2023 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… |
| CVE-2022-20816 | Alta (8.1) | 1.3% | — | 10 ago 2022 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… |
| CVE-2022-20862 | Media (4.3) | 1.5% | — | 6 jul 2022 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… |
| CVE-2022-20859 | Alta (8.8) | 1.3% | — | 6 jul 2022 | A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection… |
| CVE-2022-20815 | Media (6.1) | 0.76% | — | 6 jul 2022 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM &… |
| CVE-2022-20800 | Media (6.1) | 0.76% | — | 6 jul 2022 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications… |
| CVE-2022-20791 | Media (6.5) | 1.5% | — | 6 jul 2022 | A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications… |
| CVE-2022-20752 | Media (5.3) | 1.0% | — | 6 jul 2022 | A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote… |
| CVE-2022-20804 | Media (6.5) | 0.35% | — | 21 abr 2022 | A vulnerability in the Cisco Discovery Protocol of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated,… |
| CVE-2022-20790 | Media (6.5) | 1.9% | — | 21 abr 2022 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an… |
| CVE-2022-20789 | Media (6.5) | 1.4% | — | 21 abr 2022 | A vulnerability in the software upgrade process of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated,… |
| CVE-2022-20788 | Media (6.1) | 0.83% | — | 21 abr 2022 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an… |
| CVE-2022-20787 | Media (6.8) | 0.46% | — | 21 abr 2022 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management Edition (SME) Software could allow an authenticated, remote… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.