UC
Product
Unified Contact Center Express
47
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 14Medium 23Low 0
Watch
Add Unified Contact Center Express to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20274 | 8.8 | Jul 16 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary files to an affected… Affected: 10.5(1); 10.5(1)su1; 10.5(1)su1es10; 10.6(1); 10.6(1)su1; 10.6(1)su2; +34 more |
| CVE-2018-0402 | 8.8 | Jul 18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a… Affected: 11.5(1) |
| CVE-2016-6427 | 8.8 | Oct 6 | Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through… Affected: 10.0(1); 10.5(1); 10.6(1); 11.0(1) |
| CVE-2025-20275 | 7.8 | Jun 4 | A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute arbitrary code on an… Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2020-3177 | 7.5 | Apr 15 | A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and Cisco Unified Communications Manager Session Management… Affected: 12.0(1) |
| CVE-2019-12633 | 7.5 | Sep 5 | A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request… Affected: before 11.6\(2\)es04; 12.0(1) |
| CVE-2017-6779 | 7.5 | Jun 7 | Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,… Affected: 11.6 before 11.6\(1\); 9.0(2)su1.3 |
| CVE-2016-6426 | 7.5 | Oct 5 | The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1),… Affected: 10.0(1); 10.5(1); 10.6(1); 11.0(1) |
| CVE-2025-20376 | 7.2 | Nov 5 | A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files Affected: before 12.5\(1\)_su03_es07; 15.0 |
| CVE-2025-20375 | 7.2 | Nov 5 | A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files Affected: before 12.5\(1\)_su03_es07; 15.0 |
| CVE-2025-20276 | 7.2 | Jun 4 | A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2019-1888 | 7.2 | Sep 23 | A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to upload arbitrary files… Affected: 11.6(1); 11.6(2); 12.0(1) |
| CVE-2025-20113 | 7.1 | May 21 | A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an… Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2020-3267 | 7.1 | Jun 3 | A vulnerability in the API subsystem of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to change the availability state of any… Affected: before 12.5\(1\) |
Showing 14