Unified Communications Manager Im And Presence Service vulnerabilities

6 known vulnerabilities in Unified Communications Manager Im And Presence Service from Cisco. 6 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Cisco Unified Communications Products Code Injection Exploited

  CVE-2026-20045Jan 21, 2026CiscoEPSS 4.54%

  A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection

• 10.0 Critical severity

  Cisco Unified Contact Center Enterprise: Deserialization of Untrusted Data

  CVE-2024-20253Jan 26, 2024CiscoEPSS 2.4%

  A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provide

• 7.5 High severity

  Cisco Emergency Responder: Uncontrolled Resource Consumption

  CVE-2023-20259Oct 4, 2023Cisco

  A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call proce

• 7.5 High severity

  Cisco Unified Communications Manager IM and…: Allocation of Resources Without Limits or Throttling

  CVE-2023-20108Jun 28, 2023Cisco

  A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to cause a temporary service outage for all Cisco Unified CM IM&P

• 8.8 High severity

  Cisco Unified Communications Manager: Improper Access Control

  CVE-2022-20859Jul 6, 2022CiscoEPSS 1.3%

  A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection could allow an authenticated, remote attac

• 8.1 High severity

  Cisco Unified Communications Manager IM and…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-20786Apr 21, 2022Cisco

  A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerabili