4.7
CVE-2026-20060
- EPSS 0.2%
- Veröffentlicht 15.04.2026 16:11:20
- Zuletzt bearbeitet 28.04.2026 16:30:29
- Erkennungen
Cisco Unity Connection Open Redirect Vulnerability
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious web page.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Unity Connection Version <= 12.5
Cisco ≫ Unity Connection Version 14.0
Cisco ≫ Unity Connection Version 14su1
Cisco ≫ Unity Connection Version 14su2
Cisco ≫ Unity Connection Version 14su3
Cisco ≫ Unity Connection Version 14su3a
Cisco ≫ Unity Connection Version 14su4
Cisco ≫ Unity Connection Version 15.0
Cisco ≫ Unity Connection Version 15su1
Cisco ≫ Unity Connection Version 15su2
Cisco ≫ Unity Connection Version 15su3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.101 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.7 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
|
| Cisco PSIRT | 4.7 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
|
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw