Main Vulnerability Database Vulnerabilities #VU114777

Cross-site request forgery in Cisco Unified Communications Manager and Unified CM Session Management Edition - CVE-2025-20326

Published: September 4, 2025

Vulnerability identifier: #VU114777

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N]

CVE-ID: CVE-2025-20326

CWE-ID: CWE-352

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform cross-site request forgery attacks.

The vulnerability exists due to insufficient validation of the HTTP request origin in the web-based management interface. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website.

Affected software

Cisco Unified Communications Manager
Unified CM Session Management Edition

How to mitigate CVE-2025-20326

Install update from vendor's website.

Cisco Unified Communications Manager - update to 15SU3
Unified CM Session Management Edition - update to 15SU3

External References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-csrf-w762pRYd

Related Security Bulletins