Known vulnerabilities in Unified CM Session Management Edition

Vendor: Cisco Systems, Inc
Software: Unified CM Session Management Edition
Software CPE: cpe:2.3:a:cisco_systems:unified_cm_session_management_edition:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Unified CM Session Management Edition Unified CM Session Management Edition is affected by 4 known vulnerabilities: 4 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114777 - Cross-Site Request Forgery (CSRF)
CVE-2025-20326		 CWE-352 Low
No
No
 15SU3 04.09.2025 SB2025090417
#VU79942 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20242		 CWE-79 Low
No
No
 12.5(1)SU8, 14SU4 24.08.2023 SB2023082423
#VU62476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20788		 CWE-79 Low
No
No
 11.5(1)SU11, 12.5(1)SU6, 14SU1 21.04.2022 SB2022042133
#VU62474 - Cross-Site Request Forgery (CSRF)
CVE-2022-20787		 CWE-352 Low
No
No
 12.5(1)SU6, 14SU1 21.04.2022 SB2022042134