CSRF Vulnerability in Cisco Unified Communications Manager and Session Management Edition Software

CVE-2025-20326

What is CVE-2025-20326?

A vulnerability exists within the web-based management interface of Cisco Unified Communications Manager and Session Management Edition Software that enables unauthenticated, remote attackers to execute cross-site request forgery (CSRF) attacks. This flaw arises from inadequate protections against CSRF in the management interface, allowing attackers to craft malicious links aimed at a user. If successfully exploited, these links can lead to unauthorized operations being conducted under the privilege level of the targeted user, potentially compromising the security and functionality of the affected system.

References