CVE-2026-20060

cisco unity connection

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-20060

Katalog CVE

CVSS 4.7 · Medium EPSS 0,20%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada cisco unity connection. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious web page.

Rincian

Terbit di NVD
15 April 2026
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
4.7 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
EPSS (30 hari)
0,20% peluang dieksploitasi; lebih tinggi dari 9,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco unity connection Semua versi hingga 12.5
cisco unity connection Versi 14.0
cisco unity connection Versi 14su1
cisco unity connection Versi 14su2
cisco unity connection Versi 14su3
cisco unity connection Versi 14su3a
cisco unity connection Versi 14su4
cisco unity connection Versi 15.0
cisco unity connection Versi 15su1
cisco unity connection Versi 15su2
cisco unity connection Versi 15su3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.