# Cisco Unified Communications Manager


- [CVE-2021-44228](https://insights.sbomify.com/CVE-2021-44228/): Apache Log4j2 Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2026-20230](https://insights.sbomify.com/CVE-2026-20230/): Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) (high 8.6, exploited in the wild)
- [CVE-2026-20045](https://insights.sbomify.com/CVE-2026-20045/): Cisco Unified Communications Products Code Injection (high 8.2, exploited in the wild)
- [CVE-2025-20309](https://insights.sbomify.com/CVE-2025-20309/): Cisco Unified Communications Manager Static SSH Credentials Vulnerability (critical 10.0)
- [CVE-2011-1643](https://insights.sbomify.com/CVE-2011-1643/): Information disclosure in n/a (critical 10.0)
- [CVE-2008-1154](https://insights.sbomify.com/CVE-2008-1154/): Auth bypass in n/a (critical 10.0)
- [CVE-2008-0027](https://insights.sbomify.com/CVE-2008-0027/): Memory corruption in n/a (critical 10.0)
- [CVE-2007-5538](https://insights.sbomify.com/CVE-2007-5538/): Memory corruption in n/a (critical 10.0)
- [CVE-2006-5278](https://insights.sbomify.com/CVE-2006-5278/): Integer overflow in n/a (critical 10.0)
- [CVE-2024-20253](https://insights.sbomify.com/CVE-2024-20253/): Deserialization in Cisco Packaged Contact Center Enterprise (critical 9.9)
- [CVE-2017-12337](https://insights.sbomify.com/CVE-2017-12337/): Hardcoded credentials in Cisco Voice Operating System (critical 9.8)
- [CVE-2007-4634](https://insights.sbomify.com/CVE-2007-4634/): SQL injection in n/a (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/products/cisco/unified-communications-manager/