What’s Vulnerable › Products

Cisco Unified Communications Manager IM and Presence Service vulnerabilities

49 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your Cisco Unified Communications Manager IM and Presence Service version is affected

Exploited Cisco Unified Communications Manager IM and Presence Service vulnerabilities

• CVE-2026-20045 — Cisco Unified Communications Products Code Injection Vulnerability
• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability

Latest Cisco Unified Communications Manager IM and Presence Service vulnerabilities

• CVE-2026-76481 — Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities (CVSS 7.5)
• CVE-2026-76479 — Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities (CVSS 7.8)
• CVE-2026-76478 — Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities (CVSS 8.8)
• CVE-2026-76476 — Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities (CVSS 8.8)
• CVE-2026-76477 — Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities (CVSS 8.8)
• CVE-2026-76475 — Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities (CVSS 9.3)
• CVE-2026-76474 — Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities (CVSS 9.8)
• CVE-2026-76473 — Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. (CVSS 9.8)
• CVE-2026-20045 — Cisco Unified Communications Products Code Injection Vulnerability (CVSS 9.8) — exploited
• CVE-2025-20330 — Cisco Unified Communications Manager IM and Presence Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2025-20278 — Cisco Unified Communications Products Command Injection Vulnerability (CVSS 6.7)
• CVE-2025-20112 — Cisco Unified Communications Products Privilege Escalation Vulnerability (CVSS 5.1)
• CVE-2020-3532 — Cisco Unified Communications Products Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2024-20457 — Cisco Unified Communications Manager IM & Presence Service Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2024-20310 — (CVSS 6.1)
• CVE-2024-20253 — (CVSS 10.0)
• CVE-2023-20242 — (CVSS 6.1)
• CVE-2023-20108 — (CVSS 7.5)
• CVE-2022-20859 — Cisco Unified Communications Products Access Control Vulnerability (CVSS 8.8)
• CVE-2022-20815 — Cisco Unified Communications Products Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2022-20800 — Cisco Unified Communications Products Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2022-20791 — Cisco Unified Communications Products Arbitrary File Read Vulnerability (CVSS 6.5)
• CVE-2022-20786 — Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability (CVSS 8.1)
• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability (CVSS 10.0) — exploited
• CVE-2021-34773 — Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability (CVSS 6.5)