← nejvýznamnější zprávy · všechny zprávy

KEV ✓ EPSS 0.88

Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could…

Číst originál na Cisco PSIRT →

CZ · EN/orig

Cisco US

CVE v události 1

CVEhodnoceníKEVEPSS
CVE-2026-20230 8.6 3.1 · cisco KEV ✓ 0.88

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.