Ce mail provient de l'extérieur, restons vigilants

=====================================================================

                            CERT-Renater

                Note d'Information No. 2026/VULN586
_____________________________________________________________________

DATE                : 03/06/2026

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Cisco Unified Communications Manager,
                             Cisco Webex Meetings,
                                 Cisco Finesse.

=====================================================================
https://sec.cloudapps.cisco.com/security/center/publicationListing.x
_____________________________________________________________________

Below is the list of Cisco Security Advisories published by Cisco PSIRT on 2026-June-03.

The following PSIRT security advisories (1 Critical, 2 Medium) were
published at 16:00 UTC today.

Table of Contents:

1) Cisco Unified Communications Manager Server-Side Request Forgery
Vulnerability - SIR: Critical

2) Cisco Webex Meetings Cross-Site Scripting Vulnerability - SIR: Medium

3) Cisco Finesse Remote File Inclusion Vulnerability - SIR: Medium

+--------------------------------------------------------------------

1) Cisco Unified Communications Manager Server-Side Request Forgery
Vulnerability

CVE-2026-20230

SIR: Critical

CVSS Score v(3.1): 8.6

URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW"]

+--------------------------------------------------------------------

2) Cisco Webex Meetings Cross-Site Scripting Vulnerability

CVE-2026-20233

SIR: Medium

CVSS Score v(3.1): 6.1

URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-jw3NeQzS ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-jw3NeQzS"]

+--------------------------------------------------------------------

3) Cisco Finesse Remote File Inclusion Vulnerability

CVE-2026-20175

SIR: Medium

CVSS Score v(3.1): 6.1

URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-rfi-gwpkdc89 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-rfi-gwpkdc89"]

=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================




