9 exploited vulnerabilities in Cisco Unified Communications Manager

Vulnerabilities with publicly known exploits

Vendors: Cisco, Apache
With known exploits: 9
Affected Cisco Unified Communications Manager versions: All versions
Affected Cisco Call Manager versions: = 3.3\(5\)sr1, 3.3\(5\)sr2, 3.3\(5\)sr2a, 4.1, 4.1\(3\)sr1, 4.1\(3\)sr2, 4.1\(3\)sr3, 4.1\(3\)sr4, 4.2, 4.2\(1\), 4.2\(2\), 4.2\(3\), 4.2\(3\)sr1, 4.2\(3\)sr2, 4.3, 4.3\(1\)
Affected Cisco Unified Ip Interactive Voice Response versions: All versions
Affected Cisco Unified Ip Ivr versions: = 6.0\(1\), 7.0\(1\), 7.0\(2\), 8.0\(1\), 8.0\(2\), 8.5\(1\)

CVE-2007-4634 1 exploit

CVSS 9.3 HIGH 2007-08-31FIX AVAILABLE

Cisco CallManager 4.2 / CUCM 4.2 - Logon Page 'lang' SQL Injection

CVSS 8.8 HIGH 2019-11-20

CVE-2026-20230 2 exploits

CVSS 8.6 HIGH 2026-06-03FIX AVAILABLE

Exploit for CVE-2026-20230 Exploit for CVE-2026-20230

CVE-2011-1609 1 exploit

CVSS 8.5 HIGH 2011-05-03FIX AVAILABLE

Cisco Unified Communications Manager 8.5 - 'xmldirectorylist.jsp' Multiple SQL Injections

CVE-2011-3315 1 exploit

CVSS 7.8 HIGH 2011-10-27FIX AVAILABLE

Cisco - 'file' Directory Traversal

CVE-2013-7030 1 exploit

CVSS 7.3 HIGH 2013-12-12

Cisco Unified Communications Manager - TFTP Service

CVE-2014-8008 1 exploit

CVSS 6.8 MEDIUM 2015-01-22

Cisco Unified Communications Manager - Multiple Vulnerabilities

CVE-2010-3039 2 exploits

CVSS 6.8 MEDIUM 2010-11-09FIX AVAILABLE

Cisco Unified Communications Manager Privilege Escalation Cisco Unified Communications Manager 8.0 - Invalid Argument Privilege Escalation

CVE-2013-5528 4 exploits

CVSS 4.0 MEDIUM 2013-10-11

Cisco Unified Communications Manager 7 / 8 / 9 Directory Traversal Cisco Unified Communications Manager 7/8/9 - Directory Traversal Vulnerability