Skip to content
OpenAdvisories
Medium WID-SEC-2025-2184 1 CVE

Cisco Unified Communications Manager (CUCM): Schwachstelle ermöglicht Cross-Site Scripting

Published Oct 1, 2025 · Updated Oct 1, 2025 · de-DE

Vendor: Cisco Product: Unified Communications Manager (CUCM)

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Unified Communications Manager (CUCM) ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Der Cisco Unified Communications Manager (CUCM, ehemals CallManager) dient zur Gesprächsvermittlung in IP-Telefonie-Netzen.

Vulnerabilities 1

  • Medium 4.8
    CVE-2025-20361

    Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct a cross-si…

    Cisco Cisco Unified Communications Manager Network devices

Revision history

  1. #1

    Initiale Fassung

References