PT-2026-120695

CVE-2026-76475

·

Published

2026-10-21

·

Updated

2026-10-21

Description by

CVSS 3.1
9.3
Critical
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder (affected versions not specified) Cisco Prime Collaboration Deployment (affected versions not specified) Cisco Unified Communications Manager (Unified CM) (affected versions not specified) Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) (affected versions not specified) Cisco Unified Communications Manager Session Management Edition (Unified CM SME) (affected versions not specified) Cisco Unity Connection (affected versions not specified)
Description These products are subject to issues concerning improper neutralization of input during web page generation, which can lead to Cross-Site Scripting (XSS), a condition where malicious scripts are injected into trusted websites.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾