Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cisco Unity Connection — Vulnerabilities & Security Advisories 28

All 28 CVE vulnerabilities found in Cisco Unity Connection, with AI-generated Chinese analysis, references, and POCs.

This page documents security vulnerabilities affecting Cisco Unity Connection, a unified messaging platform, categorized by their respective weakness types and associated identifiers. It aggregates a comprehensive collection of security flaws identified in this specific product, encompassing issues ranging from remote code execution and authentication bypasses to information disclosure and denial of service conditions. The data covers vulnerability disclosures and updates released by Cisco Systems over a significant historical period, ensuring that users can review both legacy and recent security concerns. Here, you can systematically track vendor advisories related to Cisco Unity Connection to stay informed about patch availability and mitigation strategies. You can also deepen your understanding of specific weakness classes by examining how they manifest within this particular software environment, facilitating better risk assessment and remediation planning. Additionally, you can look up the product's complete vulnerability history to identify trends, recurring issues, or critical weaknesses that may impact operational security. This centralized resource provides essential context for security professionals, system administrators, and compliance officers who need to evaluate the security posture of their messaging infrastructure. By reviewing these aggregated details, stakeholders can prioritize updates, validate configuration settings against known flaws, and ensure that their deployments align with current best practices for network security. The information presented is intended to support informed decision-making regarding software maintenance and security hardening without introducing speculative data or unverified claims.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2026-20034 Cisco Unity Connection Remote Code Execution Vulnerability CWE-35 8.8 High2026-05-06
CVE-2026-20035 Cisco Unity Connection Server-Side Request Forgery Vulnerability CWE-918 7.2 High2026-05-06
CVE-2026-20059 Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability CWE-79 6.1 Medium2026-04-15
CVE-2026-20061 Cisco Unity Connection SQL Injection Vulnerability CWE-89 4.3 Medium2026-04-15
CVE-2026-20060 Cisco Unity Connection Open Redirect Vulnerability CWE-601 4.7 Medium2026-04-15
CVE-2026-20081 Cisco Unity Connection Arbitrary File Download Vulnerability CWE-23 6.5 Medium2026-04-15
CVE-2026-20078 Cisco Unity Connection Arbitrary File Download Vulnerability CWE-23 6.5 Medium2026-04-15
CVE-2020-3532 Cisco Unified Communications Products Cross-Site Scripting Vulnerability CWE-79 6.1 -2024-11-18
CVE-2024-20305 Cisco Unity Connection 安全漏洞 CWE-79 4.8 Medium2024-01-26
CVE-2024-20272 Cisco Unity Connection 安全漏洞 CWE-434 7.3 High2024-01-17
CVE-2022-20800 Cisco Unified Communications Products Cross-Site Scripting Vulnerability CWE-79 6.1 Medium2022-07-06
CVE-2021-34701 Cisco Unified Communications Products Path Traversal Vulnerability CWE-22 4.3 Medium2021-11-04
CVE-2021-1409 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities CWE-89 6.1 Medium2021-04-08
CVE-2021-1408 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities CWE-89 6.1 Medium2021-04-08
CVE-2021-1407 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities CWE-89 6.1 Medium2021-04-08
CVE-2021-1380 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities CWE-89 6.1 Medium2021-04-08
CVE-2021-1362 Cisco Unified Communications Products Remote Code Execution Vulnerability CWE-94 8.8 High2021-04-08
CVE-2019-15963 Cisco Unified Communications Manager Information Disclosure Vulnerability CWE-200 6.5 -2020-09-23
CVE-2020-3130 Cisco Unity Connection Directory Traversal Vulnerability CWE-22 6.5 -2020-09-23
CVE-2020-3282 Cisco Unified Communications Products Cross-Site Scripting Vulnerability CWE-79 6.1 -2020-07-02
CVE-2020-3129 Cisco Unity Connection Stored Cross-Site Scripting Vulnerability CWE-79 4.8 -2020-01-26
CVE-2019-12707 Multiple Cisco Unified Communications Products Cross-Site Scripting Vulnerability CWE-79 6.1 -2019-10-02
CVE-2019-1685 Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability CWE-79 6.1 -2019-02-21
CVE-2018-15426 Cisco Unity Connection Stored Cross-Site Scripting Vulnerability CWE-79 5.4 -2018-10-05
CVE-2018-15396 Cisco Unity Connection File Upload Denial of Service Vulnerability CWE-399 4.9 -2018-10-05
CVE-2018-0203 Cisco Unity Connection SMTP relay 安全漏洞 CWE-19 5.3 -2018-02-22
CVE-2017-12212 Cisco Unity Connection 跨站脚本漏洞 CWE-79 6.1 -2017-09-07
CVE-2017-6629 Cisco Unity Connection 安全漏洞 CWE-22 7.5 -2017-05-03

All 28 known CVE vulnerabilities affecting Cisco Unity Connection with full Chinese analysis, references, and POCs where available.