Known vulnerabilities in Unified CM Session Management Edition 14
Vendor:
Cisco Systems, Inc
Software:
Unified CM Session Management Edition
Version:
14
Software CPE:
cpe:2.3:a:cisco_systems:unified_cm_session_management_edition:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
5.3
Vulnerabilities by Severity
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114777 - Cross-Site Request Forgery (CSRF) CVE-2025-20326 |
CWE-352 | Low | 15SU3 | 04.09.2025 |
SB2025090417 |
||
| #VU79942 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-20242 |
CWE-79 | Low | 12.5(1)SU8, 14SU4 | 24.08.2023 |
SB2023082423 |
||
| #VU62476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-20788 |
CWE-79 | Low | 11.5(1)SU11, 12.5(1)SU6, 14SU1 | 21.04.2022 |
SB2022042133 |
||
| #VU62474 - Cross-Site Request Forgery (CSRF) CVE-2022-20787 |
CWE-352 | Low | 12.5(1)SU6, 14SU1 | 21.04.2022 |
SB2022042134 |