Vulnerability-Lookup

CNVD-2026-17803

Vulnerability from cnvd - Published: 2026-04-17

Title

Cisco Unity Connection Web管理界面SQL注入漏洞

Description

Cisco Unity Connection是一款统一通信消息平台，主要提供语音邮件和消息传递功能。 Cisco Unity Connection存在SQL注入漏洞。该漏洞源于对用户提供输入的验证不足，攻击者可利用该漏洞通过发送特制的HTTP(S)请求执行SQL注入攻击。

Severity

中

Patch Name

Cisco Unity Connection Web管理界面SQL注入漏洞的补丁

Patch Description

Cisco Unity Connection是一款统一通信消息平台，主要提供语音邮件和消息传递功能。 Cisco Unity Connection存在SQL注入漏洞。该漏洞源于对用户提供输入的验证不足，攻击者可利用该漏洞通过发送特制的HTTP(S)请求执行SQL注入攻击。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw

Reference

https://nvd.nist.gov/vuln/detail/CVE-2026-20061

Impacted products

Name
['Cisco Cisco Unity Connection 14SU2', 'Cisco Cisco Unity Connection 14SU3', 'Cisco Cisco Unity Connection 14', 'Cisco Cisco Unity Connection 15', 'Cisco Cisco Unity Connection 14SU1', 'Cisco Cisco Unity Connection 14SU3a', 'Cisco Cisco Unity Connection 15SU1', 'Cisco Cisco Unity Connection 14SU4', 'Cisco Cisco Unity Connection 15SU2', 'Cisco Cisco Unity Connection 15SU3', 'Cisco Cisco Unity Connection 14SU5']

Name

['Cisco Cisco Unity Connection 14SU2', 'Cisco Cisco Unity Connection 14SU3', 'Cisco Cisco Unity Connection 14', 'Cisco Cisco Unity Connection 15', 'Cisco Cisco Unity Connection 14SU1', 'Cisco Cisco Unity Connection 14SU3a', 'Cisco Cisco Unity Connection 15SU1', 'Cisco Cisco Unity Connection 14SU4', 'Cisco Cisco Unity Connection 15SU2', 'Cisco Cisco Unity Connection 15SU3', 'Cisco Cisco Unity Connection 14SU5']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-20061",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-20061"
    }
  },
  "description": "Cisco Unity Connection\u662f\u4e00\u6b3e\u7edf\u4e00\u901a\u4fe1\u6d88\u606f\u5e73\u53f0\uff0c\u4e3b\u8981\u63d0\u4f9b\u8bed\u97f3\u90ae\u4ef6\u548c\u6d88\u606f\u4f20\u9012\u529f\u80fd\u3002\n\nCisco Unity Connection\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5bf9\u7528\u6237\u63d0\u4f9b\u8f93\u5165\u7684\u9a8c\u8bc1\u4e0d\u8db3\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684HTTP(S)\u8bf7\u6c42\u6267\u884cSQL\u6ce8\u5165\u653b\u51fb\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2026-17803",
  "openTime": "2026-04-17",
  "patchDescription": "Cisco Unity Connection\u662f\u4e00\u6b3e\u7edf\u4e00\u901a\u4fe1\u6d88\u606f\u5e73\u53f0\uff0c\u4e3b\u8981\u63d0\u4f9b\u8bed\u97f3\u90ae\u4ef6\u548c\u6d88\u606f\u4f20\u9012\u529f\u80fd\u3002\r\n\r\nCisco Unity Connection\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5bf9\u7528\u6237\u63d0\u4f9b\u8f93\u5165\u7684\u9a8c\u8bc1\u4e0d\u8db3\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684HTTP(S)\u8bf7\u6c42\u6267\u884cSQL\u6ce8\u5165\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Unity Connection Web\u7ba1\u7406\u754c\u9762SQL\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Cisco Unity Connection 14SU2",
      "Cisco Cisco Unity Connection 14SU3",
      "Cisco Cisco Unity Connection 14",
      "Cisco Cisco Unity Connection 15",
      "Cisco Cisco Unity Connection 14SU1",
      "Cisco Cisco Unity Connection 14SU3a",
      "Cisco Cisco Unity Connection 15SU1",
      "Cisco Cisco Unity Connection 14SU4",
      "Cisco Cisco Unity Connection 15SU2",
      "Cisco Cisco Unity Connection 15SU3",
      "Cisco Cisco Unity Connection 14SU5"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2026-20061",
  "serverity": "\u4e2d",
  "submitTime": "2026-04-16",
  "title": "Cisco Unity Connection Web\u7ba1\u7406\u754c\u9762SQL\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2026-20061 (GCVE-0-2026-20061)

Vulnerability from cvelistv5 – Published: 2026-04-15 16:11 – Updated: 2026-04-15 16:56

Title

Cisco Unity Connection SQL Injection Vulnerability

Summary

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP(S) request to the web-based management interface of an affected device. A successful exploit could allow the attacker to view data on the affected device.

Severity ?

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Assigner

cisco

References

URL

Tags

https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

	Vendor	Product	Version
	Cisco	Cisco Unity Connection	Affected: 14 Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20061",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-15T16:42:14.106646Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-15T16:56:34.089Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Unity Connection",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "14"
            },
            {
              "status": "affected",
              "version": "14SU1"
            },
            {
              "status": "affected",
              "version": "14SU2"
            },
            {
              "status": "affected",
              "version": "14SU3"
            },
            {
              "status": "affected",
              "version": "14SU3a"
            },
            {
              "status": "affected",
              "version": "15"
            },
            {
              "status": "affected",
              "version": "15SU1"
            },
            {
              "status": "affected",
              "version": "14SU4"
            },
            {
              "status": "affected",
              "version": "15SU2"
            },
            {
              "status": "affected",
              "version": "15SU3"
            },
            {
              "status": "affected",
              "version": "14SU5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP(S) request to the web-based management interface of an affected device. A successful exploit could allow the attacker to view data on the affected device."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-15T16:11:20.865Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-unity-vulns-n2EJSbbw",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw"
        }
      ],
      "source": {
        "advisory": "cisco-sa-unity-vulns-n2EJSbbw",
        "defects": [
          "CSCwq36796"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Cisco Unity Connection SQL Injection Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20061",
    "datePublished": "2026-04-15T16:11:20.865Z",
    "dateReserved": "2025-10-08T11:59:15.356Z",
    "dateUpdated": "2026-04-15T16:56:34.089Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2026-17803

CVE-2026-20061 (GCVE-0-2026-20061)

Tags

Sightings

Nomenclature