[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvOUEq-0u0ZZJJ9n9PDFT7RzuKx6LuJtjrzT0JBTY7Z4":3,"g5a-family:cisco\u002Funified_communications_manager_im_and_presence_service":236,"g5a-ex:cisco\u002Funified_communications_manager_im_and_presence_service@*":237},{"success":4,"data":5},true,{"product":6,"versions":105,"topVulnerabilitiesByEpss":147,"kevVulnerabilities":209,"seoMetadata":214,"meta":233},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":104},"cisco","unified_communications_manager_im_and_presence_service",41,36,1,"2025-09-03",[14,18,20,23,25,27,29,31,34,36,38,40,43,45,47,49,52,54,56,58,60,62,64,66,68,70,72,74,76,79,81,83,85,87,89,91,93,95,97,99,101],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"10.0\\\\(1\\\\)",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"10.5",{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},"10.5\\(1\\)",3,{"version":24,"cve_count":16,"kev_count":16,"has_kev":17},"10.5\\\\(1\\\\)",{"version":26,"cve_count":16,"kev_count":16,"has_kev":17},"10.5\\\\(1\\\\)su1",{"version":28,"cve_count":16,"kev_count":16,"has_kev":17},"10.5\\\\(1\\\\)su2",{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},"10.5\\\\(1\\\\)su3",{"version":32,"cve_count":33,"kev_count":16,"has_kev":17},"10.5\\(2\\)",4,{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"10.5\\\\(2\\\\)",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"10.5\\(2\\)su10",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"10.5\\\\(2\\\\)su4a",{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},"11.0\\(1\\)",2,{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},"11.0\\\\(1\\\\)",{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},"11.0\\\\(1\\\\)su1",{"version":48,"cve_count":42,"kev_count":16,"has_kev":17},"11.5",{"version":50,"cve_count":51,"kev_count":11,"has_kev":4},"11.5\\(1\\)",9,{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"11.5\\\\(1\\\\)",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"11.5\\\\(1\\\\)su1",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"11.5\\\\(1\\\\)su10",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"11.5\\(1\\)su11",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"11.5\\\\(1\\\\)su3",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"11.5\\\\(1\\\\)su3a",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"11.5\\\\(1\\\\)su7",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"11.5\\(1\\)su8",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"11.5\\(1\\)su9",{"version":71,"cve_count":11,"kev_count":16,"has_kev":17},"12.0",{"version":73,"cve_count":42,"kev_count":16,"has_kev":17},"12.0\\(1\\)",{"version":75,"cve_count":42,"kev_count":16,"has_kev":17},"12.5",{"version":77,"cve_count":78,"kev_count":16,"has_kev":17},"12.5\\(1\\)",6,{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},"12.5\\\\(1\\\\)su2",{"version":82,"cve_count":16,"kev_count":16,"has_kev":17},"12.5\\(1\\)su4",{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},"12.5\\(1\\)su6",{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},"12.5\\\\(1\\\\)su6",{"version":88,"cve_count":33,"kev_count":16,"has_kev":17},"14.0",{"version":90,"cve_count":11,"kev_count":16,"has_kev":17},"14.0\\(1\\)",{"version":92,"cve_count":11,"kev_count":16,"has_kev":17},"14.0su1",{"version":94,"cve_count":11,"kev_count":16,"has_kev":17},"14su",{"version":96,"cve_count":16,"kev_count":16,"has_kev":17},"14su5",{"version":98,"cve_count":16,"kev_count":16,"has_kev":17},"15su3a",{"version":100,"cve_count":11,"kev_count":16,"has_kev":17},"9.0\\(1\\)",{"version":102,"cve_count":103,"kev_count":16,"has_kev":17},"9.1\\(1\\)",5,"Unified Communications Manager Im And Presence Service by Cisco is a technology product with 41 tracked versions and 36 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},{"version":24,"cve_count":16,"kev_count":16,"has_kev":17},{"version":26,"cve_count":16,"kev_count":16,"has_kev":17},{"version":28,"cve_count":16,"kev_count":16,"has_kev":17},{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},{"version":32,"cve_count":33,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},{"version":48,"cve_count":42,"kev_count":16,"has_kev":17},{"version":50,"cve_count":51,"kev_count":11,"has_kev":4},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":11,"kev_count":16,"has_kev":17},{"version":73,"cve_count":42,"kev_count":16,"has_kev":17},{"version":75,"cve_count":42,"kev_count":16,"has_kev":17},{"version":77,"cve_count":78,"kev_count":16,"has_kev":17},{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},{"version":82,"cve_count":16,"kev_count":16,"has_kev":17},{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},{"version":88,"cve_count":33,"kev_count":16,"has_kev":17},{"version":90,"cve_count":11,"kev_count":16,"has_kev":17},{"version":92,"cve_count":11,"kev_count":16,"has_kev":17},{"version":94,"cve_count":11,"kev_count":16,"has_kev":17},{"version":96,"cve_count":16,"kev_count":16,"has_kev":17},{"version":98,"cve_count":16,"kev_count":16,"has_kev":17},{"version":100,"cve_count":11,"kev_count":16,"has_kev":17},{"version":102,"cve_count":103,"kev_count":16,"has_kev":17},[148,156,163,170,176,181,186,192,199,204],{"cveId":149,"description":150,"publishedDate":151,"cvssScore":152,"cvssVersion":153,"severity":154,"isKev":4,"epssScore":155},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10",10,"v3.1","Critical",0.99999,{"cveId":157,"description":158,"publishedDate":159,"cvssScore":160,"cvssVersion":161,"severity":154,"isKev":17,"epssScore":162},"CVE-2017-12337","A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access to an affected device. The vulnerability occurs when a refresh upgrade (RU) or Prime Collaboration Deployment (PCD) migration is performed on an affected device. When a refresh upgrade or PCD migration is completed successfully, an engineering flag remains enabled and could allow root access to the device with a known password. If the vulnerable device is subsequently upgraded using the standard upgrade method to an Engineering Special Release, service update, or a new major release of the affected product, this vulnerability is remediated by that action. Note: Engineering Special Releases that are installed as COP files, as opposed to the standard upgrade method, do not remediate this vulnerability. An attacker who can access an affected device over SFTP while it is in a vulnerable state could gain root access to the device. This access could allow the attacker to compromise the affected system completely. Cisco Bug IDs: CSCvg22923, CSCvg55112, CSCvg55128, CSCvg55145, CSCvg58619, CSCvg64453, CSCvg64456, CSCvg64464, CSCvg64475, CSCvg68797.","2017-11-16",9.8,"v3.0",0.06435,{"cveId":164,"description":165,"publishedDate":166,"cvssScore":167,"cvssVersion":161,"severity":168,"isKev":17,"epssScore":169},"CVE-2019-1845","A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePresence Video Communication Server (VCS), and Cisco Expressway Series could allow an unauthenticated, remote attacker to cause a service outage for users attempting to authenticate, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient controls for specific memory operations. An attacker could exploit this vulnerability by sending a malformed Extensible Messaging and Presence Protocol (XMPP) authentication request to an affected system. A successful exploit could allow the attacker to cause an unexpected restart of the authentication service, preventing users from successfully authenticating. Exploitation of this vulnerability does not impact users who were authenticated prior to an attack.","2019-06-05",8.6,"High",0.04639,{"cveId":171,"description":172,"publishedDate":173,"cvssScore":174,"cvssVersion":153,"severity":168,"isKev":17,"epssScore":175},"CVE-2018-0409","A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video Communication Server (VCS) and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious IPv4 or IPv6 packet to an affected device on TCP port 7400. An exploit could allow the attacker to overread a buffer, resulting in a crash and restart of the XCP Router service. Cisco Bug IDs: CSCvg97663, CSCvi55947.","2018-08-15",7.5,0.03491,{"cveId":177,"description":178,"publishedDate":179,"cvssScore":174,"cvssVersion":161,"severity":168,"isKev":17,"epssScore":180},"CVE-2016-6464","A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(1.12000.2) 12.0(0.98000.181).","2016-12-14",0.03122,{"cveId":182,"description":183,"publishedDate":184,"cvssScore":174,"cvssVersion":161,"severity":168,"isKev":17,"epssScore":185},"CVE-2016-1466","Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers to cause a denial of service (sipd process restart) via crafted headers in a SIP packet, aka Bug ID CSCva39072.","2016-08-08",0.02868,{"cveId":187,"description":188,"publishedDate":189,"cvssScore":190,"cvssVersion":153,"severity":154,"isKev":17,"epssScore":191},"CVE-2024-20253","A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. An attacker could exploit this vulnerability by sending a crafted message to a listening port of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the web services user. With access to the underlying operating system, the attacker could also establish root access on the affected device.","2024-01-26",9.9,0.02399,{"cveId":193,"description":194,"publishedDate":195,"cvssScore":33,"cvssVersion":196,"severity":197,"isKev":17,"epssScore":198},"CVE-2015-4221","Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then conducting a decryption attack, aka Bug ID CSCuq46194.","2015-06-26","v2","Medium",0.02318,{"cveId":200,"description":201,"publishedDate":202,"cvssScore":103,"cvssVersion":196,"severity":197,"isKev":17,"epssScore":203},"CVE-2014-8000","Cisco Unified Communications Manager IM and Presence Service 9.1(1) produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCur63497.","2014-11-21",0.02255,{"cveId":205,"description":206,"publishedDate":207,"cvssScore":103,"cvssVersion":196,"severity":197,"isKev":17,"epssScore":208},"CVE-2015-6310","The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of service (SIP proxy service restart) via a crafted HTTP request, aka Bug ID CSCuw31632.","2015-10-08",0.02211,[210],{"cveId":149,"description":150,"publishedDate":151,"cvssScore":152,"severity":154,"isKev":4,"epssScore":155,"cisaVulnName":211,"cisaDateAdded":151,"cisaShortDescription":212,"cisaRequiredAction":213},"Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"title":215,"metaDescription":216,"keywords":217,"structuredData":218},"Unified Communications Manager Im And Presence Service by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Unified Communications Manager Im And Presence Service by Cisco covering 41 versions with 36 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Unified Communications Manager Im And Presence Service vulnerabilities, Unified Communications Manager Im And Presence Service security, Unified Communications Manager Im And Presence Service CVE, Cisco Unified Communications Manager Im And Presence Service, Unified Communications Manager Im And Presence Service threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Unified Communications Manager Im And Presence Service KEV, Unified Communications Manager Im And Presence Service exploited vulnerabilities",{"@context":219,"@type":220,"name":221,"description":216,"url":222,"manufacturer":223,"applicationCategory":227,"softwareVersion":228,"mainEntity":229},"https:\u002F\u002Fschema.org","SoftwareApplication","Unified Communications Manager Im And Presence Service","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Funified_communications_manager_im_and_presence_service",{"@type":224,"name":225,"url":226},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","41 versions tracked",{"@type":230,"name":231,"description":232,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Unified Communications Manager Im And Presence Service Security Vulnerabilities","Security vulnerabilities affecting Unified Communications Manager Im And Presence Service by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":234,"apiVersion":235},"2026-10-17T19:36:51.607Z","3.0",[],{"rows":238,"total":11,"capped":17,"failed":16},[239],{"cveId":149,"name":211,"severity":154,"cvss":152,"added":151,"epss":155,"published":240,"ranges":241,"checked":4,"hits":243,"covers":17},"2021-12-10T10:15:09.143",[242],"before 11.5(1)",[]]