Cisco Unified Communications Manager (CUCM, Unified CM, CallManager) is a call processing component of Cisco's Unified Communications System. The component provides a scalable, distributable, and highly available enterprise IP telephony call processing solution.A cross-site scripting vulnerability exists in Cisco Unified Communications Manager, which stems from insufficient cleanup of user-provided data. A remote attacker could use the vulnerability to trick victims into following specially crafted links and executing arbitrary HTML and scripting code in a vulnerable user's browser.