https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T18:17:14.362203+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-01768 bdu:2026-01768 2026-10-19T18:17:14.366974+00:00 bdu:2026-01768 https://cve.radiocsirt.org/vuln/cisco-sa-imp-xss-xqgu4hsg cisco-sa-imp-xss-XQgu4HSG — Cisco Unified Communications Manager IM & Presence Service Cross-Site Scripting Vulnerability 2026-10-19T18:17:14.367012+00:00

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/euvd-2026-272464 EUVD-2026-272464 2026-10-19T18:17:14.367048+00:00 EUVD-2026-272464 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20330 fkie_cve-2025-20330 2026-10-19T18:17:14.367061+00:00

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

 https://cve.radiocsirt.org/vuln/ghsa-42w7-6f8h-c8x8 GHSA-42w7-6f8h-c8x8 2026-10-19T18:17:14.367086+00:00

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1956 WID-SEC-W-2025-1956 — Cisco Unified CM and Unified CM IM&P: Mehrere Schwachstellen 2026-10-19T18:17:14.367115+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Unified Communications Manager IM & Presence Service und Cisco Unified Communications Manager (CUCM) ausnutzen, um Dateien zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.