UC
Product
Unified Contact Center Express
47
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 14Medium 23Low 0
Watch
Add Unified Contact Center Express to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20253 | 10.0 | Jan 26 | A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an… Affected: 12.5(1) |
| CVE-2025-20358 | 9.8 | Nov 5 | A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain… Affected: before 12.5\(1\)_su03_es07; 15.0 |
| CVE-2025-20354 | 9.8 | Nov 5 | A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute… Affected: before 12.5\(1\)_su03_es07; 15.0 |
| CVE-2020-3280 | 9.8 | May 22 | A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to execute arbitrary… Affected: 12.0 before 12.0\(1\)es03 |
| CVE-2018-0403 | 9.8 | Jul 18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to retrieve a… Affected: 11.5(1) |
| CVE-2017-12337 | 9.8 | Nov 16 | A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote… Affected: All versions, or not specified |
| CVE-2022-20658 | 9.6 | Jan 14 | A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) and Cisco Unified Contact Center Domain Manager (Unified… Affected: 12.0.1; 12.5.1 |
| CVE-2025-20274 | 8.8 | Jul 16 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary files to an affected… Affected: 10.5(1); 10.5(1)su1; 10.5(1)su1es10; 10.6(1); 10.6(1)su1; 10.6(1)su2; +34 more |
| CVE-2018-0402 | 8.8 | Jul 18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a… Affected: 11.5(1) |
| CVE-2016-6427 | 8.8 | Oct 6 | Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through… Affected: 10.0(1); 10.5(1); 10.6(1); 11.0(1) |
| CVE-2025-20275 | 7.8 | Jun 4 | A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute arbitrary code on an… Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2020-3177 | 7.5 | Apr 15 | A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and Cisco Unified Communications Manager Session Management… Affected: 12.0(1) |
| CVE-2019-12633 | 7.5 | Sep 5 | A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request… Affected: before 11.6\(2\)es04; 12.0(1) |
| CVE-2017-6779 | 7.5 | Jun 7 | Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,… Affected: 11.6 before 11.6\(1\); 9.0(2)su1.3 |
| CVE-2016-6426 | 7.5 | Oct 5 | The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1),… Affected: 10.0(1); 10.5(1); 10.6(1); 11.0(1) |
| CVE-2025-20376 | 7.2 | Nov 5 | A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files Affected: before 12.5\(1\)_su03_es07; 15.0 |
| CVE-2025-20375 | 7.2 | Nov 5 | A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files Affected: before 12.5\(1\)_su03_es07; 15.0 |
| CVE-2025-20276 | 7.2 | Jun 4 | A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2019-1888 | 7.2 | Sep 23 | A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to upload arbitrary files… Affected: 11.6(1); 11.6(2); 12.0(1) |
| CVE-2025-20113 | 7.1 | May 21 | A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an… Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2020-3267 | 7.1 | Jun 3 | A vulnerability in the API subsystem of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to change the availability state of any… Affected: before 12.5\(1\) |
| CVE-2025-20278 | 6.7 | Jun 4 | A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2025-20277 | 6.7 | Jun 4 | A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an affected device Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2023-20061 | 6.5 | Mar 3 | Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request… Affected: All versions, or not specified |
| CVE-2026-20117 | 6.1 | Mar 11 | Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities Affected: through 15.0\(1\)ES01 |
| CVE-2023-20058 | 6.1 | Jan 20 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: before 12.5\(1\)_su2_es05; 12.5\(1\)_su2 before 12.5\(1\)_su2_es05 |
| CVE-2021-1395 | 6.1 | Jun 16 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 12.5\(1\) |
| CVE-2021-1463 | 6.1 | Apr 8 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: through 12.0\(1\); 12.5\(1\) before 12.5\(1\)su1 |
| CVE-2019-15278 | 6.1 | Jan 26 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information… Affected: 12.0(1) |
| CVE-2019-15259 | 6.1 | Oct 2 | A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack Affected: before 11.6\(2\); 12.0(1) |
| CVE-2018-0401 | 6.1 | Jul 18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct… Affected: 11.5(1) |
| CVE-2018-0400 | 6.1 | Jul 18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct… Affected: 11.5(1) |
| CVE-2017-6722 | 6.1 | Jul 4 | A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to… Affected: 11.5(1); 11.5.1es01; 11.5.1su1 |
| CVE-2016-6425 | 6.1 | Oct 6 | Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1),… Affected: 10.0(1); 10.5(1); 10.6(1); 11.0(1) |
| CVE-2016-1298 | 6.1 | Jan 26 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web… Affected: 10.0(1); 10.5(1); 10.6(1); 11.0(1) |
| CVE-2025-20129 | 5.4 | Jun 4 | A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to… Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2023-20096 | 5.4 | Apr 5 | A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to perform a stored… Affected: before 12.5\(1\)su3 |
| CVE-2025-20288 | 5.3 | Jul 16 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery… Affected: 10.5(1); 10.5(1)su1; 10.5(1)su1es10; 10.6(1); 10.6(1)su1; 10.6(1)su2; +34 more |
| CVE-2023-20232 | 5.3 | Aug 16 | A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to cause a web cache poisoning… Affected: before 12.5\(1\)_su2_es05 |
| CVE-2025-20374 | 4.9 | Nov 5 | A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary resources Affected: before 12.5\(1\)_su03_es07; 15.0 |
| CVE-2025-20279 | 4.8 | Jun 4 | A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to conduct a stored XSS attack on an affected system Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2019-12626 | 4.8 | Aug 21 | A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to conduct a stored… Affected: 12.5(1) |
| CVE-2025-20114 | 4.3 | May 21 | A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected… Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2023-20062 | 4.3 | Mar 3 | Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request… Affected: All versions, or not specified |
| CVE-2011-2583 | – | May 2 | Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case,… Affected: 8.0; 8.5 |
| CVE-2010-1571 | – | Jun 10 | Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before… Affected: 5.0; 6.0; 7.0 |
| CVE-2010-1570 | – | Jun 10 | The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before… Affected: 5.0; 6.0; 7.0 |
Showing 47