How many Cisco unified communications manager CVEs are in CISA KEV?

Yes — 3 of Cisco unified communications manager's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Cisco unified communications manager are affected?

373 distinct Cisco unified communications manager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Cisco unified communications manager CVEs?

Cisco unified communications manager's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-352 (Cross-Site Request Forgery (CSRF)).

What is the average severity of Cisco unified communications manager CVEs?

The average CVSS base score across Cisco unified communications manager's scored CVEs is 6.6.

Cisco unified communications manager Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Cisco unified communications manager vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Cisco unified communications manager Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Cisco unified communications manager has 239 published CVE records since 2007, of which 3 are in CISA's Known Exploited Vulnerabilities catalog and 11 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Cisco unified communications manager, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include ios, ip phone 7861.

Severity and exploitation

How the CVSS severity of Cisco unified communications manager's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical13

High80

Medium144

Low2

In CISA’s Known Exploited Vulnerabilities catalog

3 of Cisco unified communications manager's CVEs are confirmed exploited in the wild.

Public exploits

11 of Cisco unified communications manager's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Cisco unified communications manager version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

10.5(2.10000.5)1 CVE
11.0(1.10000.10)1 CVE
11.5(1.10000.6)1 CVE

Version ranges

6.0 <= v <= 6.034 CVEs
7.1(2a) <= v <= 7.1(2a)34 CVEs
7.1(2b) <= v <= 7.1(2b)34 CVEs
7.1(3) <= v <= 7.1(3)34 CVEs
7.1(3a) <= v <= 7.1(3a)34 CVEs
7.1(3b) <= v <= 7.1(3b)34 CVEs
7.1(2a)su1 <= v <= 7.1(2a)su133 CVEs

Common weakness types

The CWE weakness categories most often found in Cisco unified communications manager CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Cisco unified communications manager CVEs were published each year.

2015

2016

2017

2018

2019

2020

2021

Other Cisco products

Browse vulnerabilities for other products by Cisco.

ios626 CVEs ios xe549 CVEs adaptive security appliance software354 CVEs nx-os278 CVEs secure firewall threat defense274 CVEs Cisco IOS XE Software264 CVEs Cisco Small Business RV Series Router Firmware262 CVEs

Frequently asked questions

Common questions about Cisco unified communications manager vulnerabilities.

How many CVEs does Cisco unified communications manager have?: Cisco unified communications manager has 239 published CVE records since 2007.
How many Cisco unified communications manager CVEs are in CISA KEV?: Yes — 3 of Cisco unified communications manager's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Cisco unified communications manager vulnerabilities?: Yes — 11 of Cisco unified communications manager's CVEs have a known public exploit.
Which versions of Cisco unified communications manager are affected?: 373 distinct Cisco unified communications manager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Cisco unified communications manager CVEs?: Cisco unified communications manager's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-352 (Cross-Site Request Forgery (CSRF)).
How many critical Cisco unified communications manager vulnerabilities are there?: Cisco unified communications manager has 13 critical and 80 high-severity CVEs.
What is the average severity of Cisco unified communications manager CVEs?: The average CVSS base score across Cisco unified communications manager's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Cisco unified communications manager vulnerabilities

Monitor new Cisco unified communications manager vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

Cisco unified communications manager Vulnerabilities