Known vulnerabilities in Cisco Unified Communications Manager IM & Presence Service 14

Vendor: Cisco Systems, Inc

Version: 14

Software CPE: cpe:2.3:a:cisco_systems:cisco_unified_communications_manager_im_presence_service:*:*:*:*:*:*:*:*

Website: https://www.cisco.com

Total vulnerabilities: 10

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU114778 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20330	CWE-79	Low	No	No	15SU3	04.09.2025	SB2025090418
#VU109651 - Privilege Chaining CVE-2025-20112	CWE-268	Low	No	No	CUP.015.000(001.12000.013)	22.05.2025	SB2025052222
#VU100063 - Exposure of sensitive information to an unauthorized actor CVE-2024-20457	CWE-200	Medium	No	No	12.5(1)SU9, 15SU2	07.11.2024	SB2024110752
#VU88131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-20310	CWE-79	Low	No	No	12.5 SU8	04.04.2024	SB2024040430
#VU85776 - Deserialization of Untrusted Data CVE-2024-20253	CWE-502	High	No	No	-	24.01.2024	SB2024012480
#VU81671 - Improper input validation CVE-2023-20259	CWE-20	High	No	No	12.5(1)SU8	06.10.2023	SB2023100607
#VU79942 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-20242	CWE-79	Low	No	No	12.5(1)SU8, 14SU4	24.08.2023	SB2023082423
#VU62475 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-20786	CWE-89	Medium	No	No	11.5(1)SU11, 12.5(1)SU6, 14SU1	21.04.2022	SB2022042131
#VU57948 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-34701	CWE-22	Low	No	No	-	04.11.2021	SB2021110406
#VU57947 - Cross-Site Request Forgery (CSRF) CVE-2021-34773	CWE-352	Low	No	No	-	04.11.2021	SB2021110405