cisco unified presence server

Name: cisco unified presence server
Brand: cisco

productUS

cpe:2.3:a:cisco:unified_presence_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical10high6medium0low

updated 2026-10-28

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2009-2874US	high7.8	3.76% (90th)	—	no fix	2009-10-16	12 versions
CVE-2006-5553US	high7.8	3.16% (88th)	—	no fix	2006-10-26	2 versions
CVE-2014-3328US	medium5.0	2.97% (87th)	—	no fix	2014-07-26	—
CVE-2013-1137US	high7.8	2.29% (83rd)	—	no fix	2013-02-27	3 versions
CVE-2015-4220US	medium4.3	2.15% (82nd)	—	no fix	2015-06-25	= 9.1(1)
CVE-2013-6983US	medium6.5	2.10% (82nd)	—	no fix	2013-12-31	—
CVE-2007-3775US	high7.8	1.98% (80th)	—	no fix	2007-07-15	4 versions
CVE-2007-1826US	high7.8	1.98% (80th)	—	no fix	2007-04-02	3 versions
CVE-2008-1158US	high7.8	1.92% (80th)	—	no fix	2008-05-16	4 versions
CVE-2007-1834US	high7.8	1.92% (80th)	—	no fix	2007-04-03	3 versions
CVE-2011-1643US	high10.0	1.90% (80th)	—	no fix	2011-08-29	21 versions
CVE-2014-3339US	medium6.5	1.54% (75th)	—	no fix	2014-08-12	—
CVE-2007-3776US	medium5.0OT elevated	1.49% (74th)	—	no fix	2007-07-15	4 versions
CVE-2013-1242US	medium5.0	1.23% (69th)	—	no fix	2013-05-10	—
CVE-2010-2840US	high7.8	1.21% (68th)	—	no fix	2010-08-26	22 versions
CVE-2010-2839US	high7.8	1.21% (68th)	—	no fix	2010-08-26	22 versions

The flaw types (CWEs) most of these CVEs share.

CWE-399CWE-3995 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-312Cleartext Storage of Sensitive Information1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.