Cisco Unified Communications Manager Im And Presence Service vulnerabilities

39 CVEs affecting Cisco Unified Communications Manager Im And Presence Service, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20045, published 2026-01-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability, published 2021-12-10. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 100% chance of exploitation in the next 30 days. Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker…
CVE-2026-20045: Cisco Unified Communications Products Code Injection Vulnerability, published 2026-01-21. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-01-21. EPSS: 4.5% chance of exploitation in the next 30 days. A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM &…
CVE-2017-12337, published 2017-11-16. Critical severity, CVSS 9.8. EPSS: 6.4% chance of exploitation in the next 30 days. A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain…
CVE-2019-1845, published 2019-06-05. High severity, CVSS 8.6. EPSS: 4.6% chance of exploitation in the next 30 days. A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePresence Video Communication Server (VCS), and Cisco…
CVE-2018-0409, published 2018-08-15. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video Communication Server (VCS) and Expressway…
CVE-2016-6464, published 2016-12-14. High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages…
CVE-2016-1466, published 2016-08-08. High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days. Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers to cause a denial of…
CVE-2024-20253, published 2024-01-26. Critical severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days. A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This…
CVE-2015-4221, published 2015-06-26. Medium severity, CVSS 4.0. EPSS: 2.3% chance of exploitation in the next 30 days. Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and…
CVE-2014-8000, published 2014-11-21. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Cisco Unified Communications Manager IM and Presence Service 9.1(1) produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to…

Latest

CVE-2025-20330, published 2025-09-03. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to…
CVE-2025-20278, published 2025-06-04. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an…
CVE-2024-20457, published 2024-11-06. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the logging component of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to view sensitive…
CVE-2024-20310, published 2024-04-03. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2023-20242, published 2023-08-16. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified…
CVE-2023-20108, published 2023-06-28. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to cause…
CVE-2022-20859, published 2022-07-06. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and…
CVE-2022-20815, published 2022-07-06. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified…