Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cisco Unity Connection — Vulnerabilities & Security Advisories 28

All 28 CVE vulnerabilities found in Cisco Unity Connection, with AI-generated Chinese analysis, references, and POCs.

This page catalogs security vulnerabilities associated with Cisco Unity Connection, a unified messaging and voicemail system developed by Cisco Systems. It specifically addresses weaknesses categorized under various common weakness enumeration types relevant to enterprise communication platforms. The content on this page aggregates reported security flaws, configuration errors, and software defects found within Cisco Unity Connection over a broad historical timeline, covering incidents from initial releases through to recent updates. By centralizing this data, the resource aims to provide transparency into the product's security posture without promoting or discouraging its use. Readers can utilize this aggregation to track Cisco’s advisory patterns and response times for specific issue types. It also serves as a reference for understanding how certain vulnerability classes have manifested in this particular software environment over time. Additionally, users can look up the historical trajectory of vulnerabilities affecting Cisco Unity Connection to assess long-term risks or compare them against similar enterprise messaging solutions. The information presented is intended for security professionals, system administrators, and risk analysts who require detailed insights into the specific attack surfaces and remediation efforts related to this product. This collection does not include real-time threat intelligence but rather focuses on documented and published security issues. The structure allows for easier navigation of complex security histories, helping stakeholders make informed decisions regarding patching, configuration hardening, and threat mitigation strategies specific to the Cisco ecosystem.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2026-20034 Cisco Unity Connection Remote Code Execution Vulnerability CWE-35 8.8 High2026-05-06
CVE-2026-20035 Cisco Unity Connection Server-Side Request Forgery Vulnerability CWE-918 7.2 High2026-05-06
CVE-2026-20059 Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability CWE-79 6.1 Medium2026-04-15
CVE-2026-20061 Cisco Unity Connection SQL Injection Vulnerability CWE-89 4.3 Medium2026-04-15
CVE-2026-20060 Cisco Unity Connection Open Redirect Vulnerability CWE-601 4.7 Medium2026-04-15
CVE-2026-20081 Cisco Unity Connection Arbitrary File Download Vulnerability CWE-23 6.5 Medium2026-04-15
CVE-2026-20078 Cisco Unity Connection Arbitrary File Download Vulnerability CWE-23 6.5 Medium2026-04-15
CVE-2020-3532 Cisco Unified Communications Products Cross-Site Scripting Vulnerability CWE-79 6.1 -2024-11-18
CVE-2024-20305 Cisco Unity Connection 安全漏洞 CWE-79 4.8 Medium2024-01-26
CVE-2024-20272 Cisco Unity Connection 安全漏洞 CWE-434 7.3 High2024-01-17
CVE-2022-20800 Cisco Unified Communications Products Cross-Site Scripting Vulnerability CWE-79 6.1 Medium2022-07-06
CVE-2021-34701 Cisco Unified Communications Products Path Traversal Vulnerability CWE-22 4.3 Medium2021-11-04
CVE-2021-1409 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities CWE-89 6.1 Medium2021-04-08
CVE-2021-1408 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities CWE-89 6.1 Medium2021-04-08
CVE-2021-1407 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities CWE-89 6.1 Medium2021-04-08
CVE-2021-1380 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities CWE-89 6.1 Medium2021-04-08
CVE-2021-1362 Cisco Unified Communications Products Remote Code Execution Vulnerability CWE-94 8.8 High2021-04-08
CVE-2019-15963 Cisco Unified Communications Manager Information Disclosure Vulnerability CWE-200 6.5 -2020-09-23
CVE-2020-3130 Cisco Unity Connection Directory Traversal Vulnerability CWE-22 6.5 -2020-09-23
CVE-2020-3282 Cisco Unified Communications Products Cross-Site Scripting Vulnerability CWE-79 6.1 -2020-07-02
CVE-2020-3129 Cisco Unity Connection Stored Cross-Site Scripting Vulnerability CWE-79 4.8 -2020-01-26
CVE-2019-12707 Multiple Cisco Unified Communications Products Cross-Site Scripting Vulnerability CWE-79 6.1 -2019-10-02
CVE-2019-1685 Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability CWE-79 6.1 -2019-02-21
CVE-2018-15426 Cisco Unity Connection Stored Cross-Site Scripting Vulnerability CWE-79 5.4 -2018-10-05
CVE-2018-15396 Cisco Unity Connection File Upload Denial of Service Vulnerability CWE-399 4.9 -2018-10-05
CVE-2018-0203 Cisco Unity Connection SMTP relay 安全漏洞 CWE-19 5.3 -2018-02-22
CVE-2017-12212 Cisco Unity Connection 跨站脚本漏洞 CWE-79 6.1 -2017-09-07
CVE-2017-6629 Cisco Unity Connection 安全漏洞 CWE-22 7.5 -2017-05-03

All 28 known CVE vulnerabilities affecting Cisco Unity Connection with full Chinese analysis, references, and POCs where available.