Known vulnerabilities in Cisco Unified Communications Manager IM & Presence Service 15

Vendor: Cisco Systems, Inc
Software: Cisco Unified Communications Manager IM & Presence Service
Version: 15
Software CPE: cpe:2.3:a:cisco_systems:cisco_unified_communications_manager_im_presence_service:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco Unified Communications Manager IM & Presence Service version 15 Cisco Unified Communications Manager IM & Presence Service 15 is affected by 2 vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114778 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20330		 CWE-79 Low
No
No
 15SU3 04.09.2025 SB2025090418
#VU100063 - Exposure of sensitive information to an unauthorized actor
CVE-2024-20457		 CWE-200 Medium
No
No
 12.5(1)SU9, 15SU2 07.11.2024 SB2024110752