7.2
Élevée
CVE-2026-20035 A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to…
Description
A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Unity Connection 15 | 15SU1 → 15 | Pas de correctif indiqué |
| Cisco Unity Connection 14 | 14SU1 → 14 | Pas de correctif indiqué |
Autres CVE de Cisco Unity Connection
Les 39 CVE de Cisco Unity Connection →
CVE-2026-76481
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…
7.5
Élevée
CVE-2026-76479
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…
7.8
Élevée
CVE-2026-76478
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…
8.8
Élevée
CVE-2026-76476
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…
8.8
Élevée