Cisco Virtualized Voice Browser vulnerabilities

4 known vulnerabilities affecting cisco/cisco_virtualized_voice_browser.

Total CVEs

4

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2025-20278MEDIUMCVSS 6.7v11.0(1)v11.6(1)_ES84+91 more2025-06-04

CVE-2025-20278 [MEDIUM] CWE-77 CVE-2025-20278: A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenti A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerab

CVE-2025-20112MEDIUMCVSS 5.1v11.0(1)v11.6(1)_ES84+91 more2025-05-21

CVE-2025-20112 [MEDIUM] CWE-268 CVE-2025-20112: A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attacker could exploit this vulnerability by executing craf

CVE-2024-20253CRITICALCVSS 10.0v11.0(1)v11.5(1)+65 more2024-01-26

CVE-2024-20253 [CRITICAL] CWE-502 CVE-2024-20253: A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. An attacker could exploit this vulnerability by se

CVE-2021-1575MEDIUMCVSS 6.1vn/a2021-07-08

CVE-2021-1575 [MEDIUM] CWE-79 CVE-2021-1575: A vulnerability in the web-based management interface of Cisco Virtualized Voice Browser could allow A vulnerability in the web-based management interface of Cisco Virtualized Voice Browser could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could ex