Cisco Unified Communications Manager / Cisco Unity Connection vulnerabilities

2 known vulnerabilities in Cisco Unified Communications Manager / Cisco Unity Connection from Cisco. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Cisco Unified Contact Center Enterprise: Deserialization of Untrusted Data

  CVE-2024-20253Jan 26, 2024CiscoEPSS 2.4%

  A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provide

• 8.8 High severity

  Cisco Unified Communications Manager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-20211Aug 16, 2023Cisco

  A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct SQL injecti