CYBER CODE RED

Get real-time updates on Telegram

P5Verified

CVE-2025-20361: Cisco Unified Communications Manager 12.5(1)SU2, 12.5(1)SU1, 12.5(1), 12.5(1)SU3, 12.5(1)SU4, 14, 12.5(1)SU5, 14SU1…

CVE-2025-20361. CVSS 3.1 base score 4.8 (MEDIUM, Vendor/CNA). EPSS 0.00222 (percentile 0.11735), scored 11-Oct-2026.

Affected technology

Cisco Unified Communications Manager · 12.5(1)SU2, 12.5(1)SU1, 12.5(1), 12.5(1)SU3, 12.5(1)SU4, 14, 12.5(1)SU5, 14SU1, 12.5(1)SU6, 14SU2, 12.5(1)SU7, 12.5(1)SU7a, 14SU3, 12.5(1)SU8, 12.5(1)SU8a, 15, 15SU1, 14SU4, 14SU4a, 15SU1a, 12.5(1)SU9, 15SU2
Cisco

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · High privileges required · User interaction required

What an attacker can do

An authenticated, remote attacker could conduct a cross-site scripting (XSS) attack against a user of the interface. Vendor/CNA’s CVSS 3.1 assessment (base score 4.8/10) rates confidentiality and integrity impact as low; availability impact as none.

Published

CWE
CWE-79
CCR priority
19.3 /100 (P5)
CVSS 3.1
4.8 /10 · CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N · Vendor/CNA
EPSS
0.00222 · percentile 0.11735 · 2026-10-11
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-20361.html