# Cisco Unity Connection


- [CVE-2021-44228](https://insights.sbomify.com/CVE-2021-44228/): Apache Log4j2 Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2026-20045](https://insights.sbomify.com/CVE-2026-20045/): Cisco Unified Communications Products Code Injection (high 8.2, exploited in the wild)
- [CVE-2024-20253](https://insights.sbomify.com/CVE-2024-20253/): Deserialization in Cisco Packaged Contact Center Enterprise (critical 9.9)
- [CVE-2017-12337](https://insights.sbomify.com/CVE-2017-12337/): Hardcoded credentials in Cisco Voice Operating System (critical 9.8)
- [CVE-2014-3333](https://insights.sbomify.com/CVE-2014-3333/): Privilege escalation in n/a (critical 9.0)
- [CVE-2012-0366](https://insights.sbomify.com/CVE-2012-0366/): Privilege escalation in n/a (critical 9.0)
- [CVE-2026-20034](https://insights.sbomify.com/CVE-2026-20034/): Cisco Unity Connection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-1362](https://insights.sbomify.com/CVE-2021-1362/): Cisco Unified Communications Products Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-20259](https://insights.sbomify.com/CVE-2023-20259/): Denial of service in Cisco Emergency Responder (high 8.6)
- [CVE-2012-3060](https://insights.sbomify.com/CVE-2012-3060/): Denial of service in n/a (high 7.8)
- [CVE-2012-0367](https://insights.sbomify.com/CVE-2012-0367/): Denial of service in n/a (high 7.8)
- [CVE-2017-6779](https://insights.sbomify.com/CVE-2017-6779/): Denial of service in Multiple Cisco Products unknown (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/cisco/unity-connection/