CVE-2026-20059
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A reflected XSS vulnerability exists in the web-based management interface of Cisco Unity Connection due to improper validation of user-supplied input. An unauthenticated remote attacker could persuade a user to click a crafted link, allowing execution of arbitrary script code in the context of the affected interface.
Risk Assessment
This could allow an attacker to steal session data or sensitive browser-based information from a user, potentially leading to session hijacking. Exploitation requires user interaction but no authentication on the attacker's side.
Recommendation
Update Cisco Unity Connection to a patched version. Additionally, implement XSS mitigations such as CSP headers and train users to avoid suspicious links.
Other vulnerabilities in Cisco Unity Connection
See all- CVE-2015-0616High
The Connection Conversation Manager (CuCsMgr) process in Cisco Unity Connection in versions 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) by improperly terminating SIP TCP connections.
- CVE-2015-0615High
The call-handling implementation in Cisco Unity Connection in versions before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (port consumption) by improperly terminating SIP sessions.
- CVE-2015-0614High
The Connection Conversation Manager (CuCsMgr) process in Cisco Unity Connection before versions 8.5(1)SU7, 8.6(2a)SU4, 9.1(2)SU2, and 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service via crafted SIP INVITE messages.
- CVE-2015-0613High
The Connection Conversation Manager (CuCsMgr) process in Cisco Unity Connection before version 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service via crafted SIP INVITE messages.
- CVE-2015-0612High
The Connection Conversation Manager (CuCsMgr) process in Cisco Unity Connection versions 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (SIP outage) via a crafted UDP packet.
- CVE-2014-3333High
The server in Cisco Unity Connection versions 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an 'HTTP Intercept' attack and leveraging the ability to read files within the context of the web-server user account.
- CVE-2026-20035High
A vulnerability in the web UI of Cisco Unity Connection Web Inbox allows an unauthenticated, remote attacker to conduct SSRF attacks. It is due to improper input validation for specific HTTP requests.
- CVE-2026-20034High
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device. The issue is due to insufficient validation of user-supplied input.
- CVE-2026-20081Medium
Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system. Exploitation requires valid administrative credentials, and the vulnerabilities are due to improper sanitization of user input to the web-based management interface.
- CVE-2026-20078Medium
Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system. Exploitation requires valid administrative credentials, and the vulnerabilities are due to improper sanitization of user input to the web-based management interface.
Original NVD description (English source)
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS