CVE-2015-4206: Cisco Unified Communications Manager

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Cisco Unified Communications Manager (UCM) 8.0 through 8.6 allows remote attackers to bypass an XSS protection mechanism via a crafted parameter, aka Bug ID CSCuu15266.

Affected products

• Cisco Unified Communications Manager: version 8.0(2c) only; version 8.0(3) only; version 8.0_base only; version 8.5.1 only; version 8.5_base only; version 8.6.1 only; …

Published 2015-12-15. Last modified 2026-06-17.