cisco unity connection güvenlik açıkları (CVE)

cisco unity connection için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

10 sonuç
8.8Yüksek
CVE-2026-20034

Cisco Unity Connection Remote Code Execution Vulnerability

Cisco Cisco Unity Connection

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An a…

7.2Yüksek
CVE-2026-20035

Cisco Unity Connection Server-Side Request Forgery Vulnerability

Cisco Cisco Unity Connection

A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An atta…

4.3Orta
CVE-2026-20061

Cisco Unity Connection SQL Injection Vulnerability

Cisco Cisco Unity Connection

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, the attacker must have valid user crede…

4.7Orta
CVE-2026-20060

Cisco Unity Connection Open Redirect Vulnerability

Cisco Cisco Unity Connection

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. A…

6.5Orta
CVE-2026-20081

Cisco Unity Connection Arbitrary File Download Vulnerability

Cisco Cisco Unity Connection

Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system. To exploit these vulnerabilities, the attacker must have valid administrative credentials.  Thes…

6.5Orta
CVE-2026-20078

Cisco Unity Connection Arbitrary File Download Vulnerability

Cisco Cisco Unity Connection

Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system. To exploit these vulnerabilities, the attacker must have valid administrative credentials.  Thes…

8.2Yüksek
CVE-2026-20045 KEV

Cisco Unified Communications Products Remote Code Execution Vulnerability

Cisco Cisco Unified Communications Manager; Cisco Cisco Unified Communications Manager IM and Presence Service; Cisco Cisco Unity Connection

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connectio…

4.5%EPSS
6.0Orta
CVE-2025-20278

Cisco Unified Communications Products Command Injection Vulnerability

Cisco Cisco Finesse; Cisco Cisco SocialMiner; Cisco Cisco Unified Communications Manager; Cisco Cisco Unified Communications Manager IM and Presence Service

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to …

10.0Kritik
CVE-2021-44228 KEV Fidye yazılımında kullanılıyor

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Apache Software Foundation Apache Log4j2

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who …

100%EPSS