CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-20800

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 38.0%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2022-20800

Cisco » Unified Communications Manager » Version: 11.5(1)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1)
Cisco » Unified Communications Manager » Version: 11.5(1)su1

cpe:2.3:a:cisco:unified_communications_manager:11.5(1)su1
Cisco » Unified Communications Manager » Version: 11.5(1)su11

cpe:2.3:a:cisco:unified_communications_manager:11.5(1)su11
Cisco » Unified Communications Manager » Version: 11.5(1)su2

cpe:2.3:a:cisco:unified_communications_manager:11.5(1)su2
Cisco » Unified Communications Manager » Version: 11.5(1)su3

cpe:2.3:a:cisco:unified_communications_manager:11.5(1)su3
Cisco » Unified Communications Manager » Version: 11.5(1)su4

cpe:2.3:a:cisco:unified_communications_manager:11.5(1)su4
Cisco » Unified Communications Manager » Version: 11.5(1)su5

cpe:2.3:a:cisco:unified_communications_manager:11.5(1)su5
Cisco » Unified Communications Manager » Version: 11.5(1)su7

cpe:2.3:a:cisco:unified_communications_manager:11.5(1)su7
Cisco » Unified Communications Manager » Version: 11.5(1)su8

cpe:2.3:a:cisco:unified_communications_manager:11.5(1)su8
Cisco » Unified Communications Manager » Version: 11.5(1)su9

cpe:2.3:a:cisco:unified_communications_manager:11.5(1)su9
Cisco » Unified Communications Manager » Version: 11.5(1.10000.6)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1.10000.6)
Cisco » Unified Communications Manager » Version: 11.5(1.11.007.2)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1.11.007.2)
Cisco » Unified Communications Manager » Version: 11.5(1.11007.2)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1.11007.2)
Cisco » Unified Communications Manager » Version: 11.5(1.12000.1)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1.12000.1)
Cisco » Unified Communications Manager » Version: 11.5(1.13900.52)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1.13900.52)
Cisco » Unified Communications Manager » Version: 11.5(1.17900.52)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1.17900.52)
Cisco » Unified Communications Manager » Version: 11.5(1.18119.2)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1.18119.2)
Cisco » Unified Communications Manager » Version: 11.5(1.18900.97)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1.18900.97)
Cisco » Unified Communications Manager » Version: 11.5(1.2)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1.2)
Cisco » Unified Communications Manager » Version: 11.5(1.21900.40)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1.21900.40)
Cisco » Unified Communications Manager » Version: 11.5(1.22900.28)

cpe:2.3:a:cisco:unified_communications_manager:11.5(1.22900.28)
Cisco » Unified Communications Manager » Version: 11.5.0

cpe:2.3:a:cisco:unified_communications_manager:11.5.0
Cisco » Unified Communications Manager » Version: 12.0

cpe:2.3:a:cisco:unified_communications_manager:12.0
Cisco » Unified Communications Manager » Version: 12.0(0.98000.452)

cpe:2.3:a:cisco:unified_communications_manager:12.0(0.98000.452)
Cisco » Unified Communications Manager » Version: 12.0(0.99000.9)

cpe:2.3:a:cisco:unified_communications_manager:12.0(0.99000.9)
Cisco » Unified Communications Manager » Version: 12.0(0.99999.2)

cpe:2.3:a:cisco:unified_communications_manager:12.0(0.99999.2)
Cisco » Unified Communications Manager » Version: 12.0(1)

cpe:2.3:a:cisco:unified_communications_manager:12.0(1)
Cisco » Unified Communications Manager » Version: 12.0(1)su1

cpe:2.3:a:cisco:unified_communications_manager:12.0(1)su1
Cisco » Unified Communications Manager » Version: 12.0(1)su2

cpe:2.3:a:cisco:unified_communications_manager:12.0(1)su2
Cisco » Unified Communications Manager » Version: 12.0(1)su3

cpe:2.3:a:cisco:unified_communications_manager:12.0(1)su3
Cisco » Unified Communications Manager » Version: 12.0(1)su4

cpe:2.3:a:cisco:unified_communications_manager:12.0(1)su4
Cisco » Unified Communications Manager » Version: 12.0(1)su5

cpe:2.3:a:cisco:unified_communications_manager:12.0(1)su5
Cisco » Unified Communications Manager » Version: 12.0(1.10000.10)

cpe:2.3:a:cisco:unified_communications_manager:12.0(1.10000.10)
Cisco » Unified Communications Manager » Version: 12.5

cpe:2.3:a:cisco:unified_communications_manager:12.5
Cisco » Unified Communications Manager » Version: 12.5(1)

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)
Cisco » Unified Communications Manager » Version: 12.5(1)su1

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)su1
Cisco » Unified Communications Manager » Version: 12.5(1)su2

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)su2
Cisco » Unified Communications Manager » Version: 12.5(1)su3

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)su3
Cisco » Unified Communications Manager » Version: 12.5(1)su4

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)su4
Cisco » Unified Communications Manager » Version: 12.5(1)su5

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)su5
Cisco » Unified Communications Manager » Version: 12.5(1)su6

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)su6
Cisco » Unified Communications Manager » Version: 12.5(1)su7

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)su7
Cisco » Unified Communications Manager » Version: 12.5(1)su7a

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)su7a
Cisco » Unified Communications Manager » Version: 12.5(1)su8

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)su8
Cisco » Unified Communications Manager » Version: 12.5(1)su8a

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)su8a
Cisco » Unified Communications Manager » Version: 12.5(1)su9

cpe:2.3:a:cisco:unified_communications_manager:12.5(1)su9
Cisco » Unified Communications Manager » Version: 12.5(1.10000.22)

cpe:2.3:a:cisco:unified_communications_manager:12.5(1.10000.22)
Cisco » Unified Communications Manager » Version: 12.5.1su8

cpe:2.3:a:cisco:unified_communications_manager:12.5.1su8
Cisco » Unified Communications Manager » Version: 12.6

cpe:2.3:a:cisco:unified_communications_manager:12.6
Cisco » Unified Communications Manager » Version: 14.0

cpe:2.3:a:cisco:unified_communications_manager:14.0
Cisco » Unified Communications Manager » Version: 14.0(1.10000.20)

cpe:2.3:a:cisco:unified_communications_manager:14.0(1.10000.20)
Cisco » Unified Communications Manager » Version: 14.0su1

cpe:2.3:a:cisco:unified_communications_manager:14.0su1
Cisco » Unified Communications Manager » Version: 14.0su2

cpe:2.3:a:cisco:unified_communications_manager:14.0su2
Cisco » Unified Communications Manager » Version: 14.0su2a

cpe:2.3:a:cisco:unified_communications_manager:14.0su2a
Cisco » Unified Communications Manager » Version: 14.0su3

cpe:2.3:a:cisco:unified_communications_manager:14.0su3
Cisco » Unified Communications Manager » Version: 14.0su4

cpe:2.3:a:cisco:unified_communications_manager:14.0su4
Cisco » Unified Communications Manager » Version: 14.0su4a

cpe:2.3:a:cisco:unified_communications_manager:14.0su4a
Cisco » Unified Communications Manager » Version: 14su1

cpe:2.3:a:cisco:unified_communications_manager:14su1
Cisco » Unified Communications Manager Im And Presence Service » Version: 11.5(1)

cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:11.5(1)
Cisco » Unified Communications Manager Im And Presence Service » Version: 11.5(1)su11

cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:11.5(1)su11
Cisco » Unified Communications Manager Im And Presence Service » Version: 11.5(1)su8

cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:11.5(1)su8
Cisco » Unified Communications Manager Im And Presence Service » Version: 11.5(1)su9

cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:11.5(1)su9
Cisco » Unified Communications Manager Im And Presence Service » Version: 12.0

cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:12.0
Cisco » Unified Communications Manager Im And Presence Service » Version: 12.0(1)

cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:12.0(1)
Cisco » Unified Communications Manager Im And Presence Service » Version: 12.5

cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:12.5
Cisco » Unified Communications Manager Im And Presence Service » Version: 12.5(1)

cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:12.5(1)
Cisco » Unified Communications Manager Im And Presence Service » Version: 12.5(1)su4

cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:12.5(1)su4
Cisco » Unity Connection » Version: 11.5(1)

cpe:2.3:a:cisco:unity_connection:11.5(1)
Cisco » Unity Connection » Version: 11.5(1)su3

cpe:2.3:a:cisco:unity_connection:11.5(1)su3
Cisco » Unity Connection » Version: 11.5(1)su8

cpe:2.3:a:cisco:unity_connection:11.5(1)su8
Cisco » Unity Connection » Version: 11.5(1)su9

cpe:2.3:a:cisco:unity_connection:11.5(1)su9
Cisco » Unity Connection » Version: 11.5(1.10000.6)

cpe:2.3:a:cisco:unity_connection:11.5(1.10000.6)
Cisco » Unity Connection » Version: 11.5_base

cpe:2.3:a:cisco:unity_connection:11.5_base
Cisco » Unity Connection » Version: 11.5su7

cpe:2.3:a:cisco:unity_connection:11.5su7
Cisco » Unity Connection » Version: 12.0

cpe:2.3:a:cisco:unity_connection:12.0
Cisco » Unity Connection » Version: 12.0(1)

cpe:2.3:a:cisco:unity_connection:12.0(1)
Cisco » Unity Connection » Version: 12.0(1)su4

cpe:2.3:a:cisco:unity_connection:12.0(1)su4
Cisco » Unity Connection » Version: 12.5

cpe:2.3:a:cisco:unity_connection:12.5
Cisco » Unity Connection » Version: 12.5(1)

cpe:2.3:a:cisco:unity_connection:12.5(1)
Cisco » Unity Connection » Version: 12.5(1)su3

cpe:2.3:a:cisco:unity_connection:12.5(1)su3
Cisco » Unity Connection » Version: 12.5(1)su6

cpe:2.3:a:cisco:unity_connection:12.5(1)su6
Cisco » Unity Connection » Version: 12.5(1)su7

cpe:2.3:a:cisco:unity_connection:12.5(1)su7
Cisco » Unity Connection » Version: 12.5(1)su8

cpe:2.3:a:cisco:unity_connection:12.5(1)su8
Cisco » Unity Connection » Version: 12.5su2

cpe:2.3:a:cisco:unity_connection:12.5su2
Cisco » Unity Connection » Version: 14.0

cpe:2.3:a:cisco:unity_connection:14.0
Cisco » Unity Connection » Version: 14su1

cpe:2.3:a:cisco:unity_connection:14su1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-20800

Products

Pricing

Contact Us