Aller au contenu
en Se connecter
4.8 Moyenne

CVE-2025-20361 A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco…

Description

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid administrative credentials.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Unified Communications Manager 15 15SU1a → 15 Pas de correctif indiqué
Cisco Unified Communications Manager 14 14SU1 → 14 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Unified Communications Manager

Les 62 CVE de Cisco Unified Communications Manager →
CVE-2026-76419 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability 6.1 Moyenne CVE-2026-76481 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.5 Élevée CVE-2026-76487 A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session… 5.3 Moyenne CVE-2026-76479 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.8 Élevée
Suivre cette CVE