Skip to content
Sign in
4.3 Medium

CVE-2021-34701 A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco…

Description

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection could allow an authenticated, remote attacker to access sensitive data on an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to access sensitive files on the affected system.

Affected products and versions

Product Affected versions Fixed in
Cisco Unity Connection Versions not published

Other CVEs of Cisco Unity Connection

The 39 CVEs of Cisco Unity Connection →
CVE-2026-76481 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.5 High CVE-2026-76479 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.8 High CVE-2026-76478 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 8.8 High CVE-2026-76476 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 8.8 High
Track this CVE