Skip to content
OpenAdvisories
Medium WID-SEC-2025-1956 2 CVEs

Cisco Unified CM and Unified CM IM&P: Mehrere Schwachstellen

Published Sep 3, 2025 · Updated Sep 3, 2025 · de-DE

Vendor: Cisco Product: Unified Communications Manager (CUCM) Product: Unified Communications Manager IM & Presence Service

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Unified Communications Manager IM & Presence Service und Cisco Unified Communications Manager (CUCM) ausnutzen, um Dateien zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.

Product

Der Cisco Unified Communications Manager (CUCM) (ehemals CallManager) dient zur Gesprächsvermittlung in IP-Telefonie-Netzen.
Der Cisco Unified Communications Manager (CUCM, ehemals CallManager) dient zur Gesprächsvermittlung in IP-Telefonie-Netzen.

Vulnerabilities 2

  • Medium 6.1
    CVE-2025-20330

    Cisco Unified Communications Manager IM and Presence Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the …

    Cisco Cisco Unified Communications Manager IM and Presence Service Network devices
  • Medium 4.3
    CVE-2025-20326

    Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management Edition (SME) Software could allow an unauthenticated, remote attacker to conduct a cross-site request …

    Cisco Cisco Unified Communications Manager Network devices

Revision history

  1. #1

    Initiale Fassung

References