Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-20060

Опубликовано: 15 апр. 2026
Источник: nvd
CVSS3: 4.7
EPSS Низкий

Описание

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious web page.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*
Версия до 12.5 (включая)
cpe:2.3:a:cisco:unity_connection:14.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unity_connection:14su1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unity_connection:14su2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unity_connection:14su3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unity_connection:14su3a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unity_connection:14su4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unity_connection:15.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unity_connection:15su1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unity_connection:15su2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unity_connection:15su3:*:*:*:*:*:*:*

EPSS

Процентиль: 10%
0.00202
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 4.7
github
4 месяца назад

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious web page.

CVSS3: 4.7
fstec
4 месяца назад

Уязвимость веб-интерфейса управления интегрированной системы обмена сообщениями Cisco Unity Connection, позволяющая нарушителю проводить фишинг-атаки

EPSS

Процентиль: 10%
0.00202
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-601