← Home
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
Source: cisco / cisco-sa-cucm-ssrf-cXPnHcW
— original advisory
Published: 2026-06-03
· Last updated: 2026-07-01
· Vendor severity: Critical
Exploited (KEV)
CVEs
| CVE | CVSS | CWE | Exploitation |
|---|
| CVE-2026-20230 |
8.6 |
CWE-918: Server-Side Request Forgery (SSRF) |
Exploited (KEV)
|
Affected Products
| Product | Affected versions | Fixed version |
|---|
| Cisco Unified Communications Manager |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 14 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 14SU1 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 14SU2 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 14SU3 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 14SU4 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 14SU4a |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 14SU5 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15.0.1.13010-1 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15.0.1.13011-1 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15.0.1.13012-1 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15.0.1.13013-1 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15.0.1.13014-1 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15.0.1.13015-1 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15.0.1.13016-1 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15.0.1.13017-1 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15SU1 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15SU1a |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15SU2 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15SU3a |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15SU4 |
Not specified by vendor |
Not specified by vendor |
| Cisco Unified Communications Manager 15SU4a |
Not specified by vendor |
Not specified by vendor |