CVE-2024-20305: Cisco Unity Connection · Cross-site Scripting
Affects Cisco Unity ConnectionSource CVE Database V5
Not known to be exploited · CVSS 4.8 Medium.
Data as of 26 Oct 2026, 10:12 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 28% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NExploitation evidence
Disclosed: evidence found.
CVE published 26 Jan 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Cisco Cisco Unity Connection | Affected
| Fixed in– |
AI-suggested
To mitigate this vulnerability effectively, European organizations should: 1) Immediately review and restrict access to the Cisco Unity Connection management interface, ensuring it is only accessible to trusted administrators via secure networks or VPNs. 2) Implement strict user training and awareness programs to recognize phishing attempts and avoid clicking on suspicious links, as user interaction is required for exploitation. 3) Monitor administrative access logs for unusual activity that could indicate attempted exploitation. 5) Employ web application firewalls (WAFs) with rules designed to detect and block XSS payloads targeting the management interface. 6) Consider multi-factor authentication (MFA) for accessing the management interface to reduce the risk from compromised credentials. 7) Segment the management interface network segment to limit exposure and potential lateral movement in case of compromise.
Description
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.