What’s Vulnerable › Products
Cisco Unity Connection vulnerabilities
75 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 19 published in the last 12 months.
Check whether your Cisco Unity Connection version is affected
Exploited Cisco Unity Connection vulnerabilities
- CVE-2026-20045 — Cisco Unified Communications Products Code Injection Vulnerability
- CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability
Latest Cisco Unity Connection vulnerabilities
- CVE-2026-76481 — Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities (CVSS 7.5)
- CVE-2026-76479 — Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities (CVSS 7.8)
- CVE-2026-76478 — Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities (CVSS 8.8)
- CVE-2026-76477 — Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities (CVSS 8.8)
- CVE-2026-76476 — Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities (CVSS 8.8)
- CVE-2026-76475 — Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities (CVSS 9.3)
- CVE-2026-76474 — Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities (CVSS 9.8)
- CVE-2026-76473 — Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. (CVSS 9.8)
- CVE-2026-20035 — Cisco Unity Connection Server-Side Request Forgery Vulnerability (CVSS 7.2)
- CVE-2026-20034 — Cisco Unity Connection Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-20081 — Cisco Unity Connection Arbitrary File Download Vulnerability (CVSS 6.5)
- CVE-2026-20078 — Cisco Unity Connection Arbitrary File Download Vulnerability (CVSS 6.5)
- CVE-2026-20061 — Cisco Unity Connection SQL Injection Vulnerability (CVSS 6.5)
- CVE-2026-20060 — Cisco Unity Connection Open Redirect Vulnerability (CVSS 4.7)
- CVE-2026-20059 — Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability (CVSS 6.1)
- CVE-2026-20045 — Cisco Unified Communications Products Code Injection Vulnerability (CVSS 9.8) — exploited
- CVE-2025-20278 — Cisco Unified Communications Products Command Injection Vulnerability (CVSS 6.7)
- CVE-2025-20112 — Cisco Unified Communications Products Privilege Escalation Vulnerability (CVSS 5.1)
- CVE-2020-3532 — Cisco Unified Communications Products Cross-Site Scripting Vulnerability (CVSS 6.1)
- CVE-2024-20305 — (CVSS 4.8)
- CVE-2024-20253 — (CVSS 10.0)
- CVE-2024-20272 — (CVSS 9.8)
- CVE-2023-20259 — (CVSS 7.5)
- CVE-2023-20266 — (CVSS 7.2)
- CVE-2022-20859 — Cisco Unified Communications Products Access Control Vulnerability (CVSS 8.8)