Ref# ADV2025_348 | Date: Oct 3rd 2025

---

Cisco Security has published a security advisory highlighting vulnerabilities in the following products on October 1st, 2025. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

• Cisco Cyber Vision Center – versions 5.1 and 5.2 and prior 

• Cisco Unified CM, Unified CM SME – versions 12.5, 14 and versions prior to 15SU3 

For more information on these updates, you can follow these URLs: 

• Cisco Cyber Vision Center Stored Cross-Site Scripting Vulnerabilities 

• Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability 

• Cisco Security Advisories 

The Guyana National CIRT recommends that users and administrators review these updates and apply it where necessary. 

PDF Download:  Cisco Security Advisory

References 

• Cisco Cyber Vision Center Stored Cross-Site Scripting Vulnerabilities. (October 01, 2025). Retrieved from Cisco. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cv-xss-rwRAKAJ9 
•  Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability. (October 01, 2025). Retrieved from Cisco. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-stored-xss-Fnj66YLy 
•  Cisco Security Advisories. (n.d.). Retrieved from Cisco. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-stored-xss-Fnj66YLy 
• Cisco security advisory. (October 02, 2025). Retrieved from Canadian Centre for Cyber Security.
  https://www.cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av25-633