UC
Product
Unified Contact Center Express
47
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 14Medium 23Low 0
Watch
Add Unified Contact Center Express to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20278 | 6.7 | Jun 4 | A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2025-20277 | 6.7 | Jun 4 | A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an affected device Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2023-20061 | 6.5 | Mar 3 | Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request… Affected: All versions, or not specified |
| CVE-2026-20117 | 6.1 | Mar 11 | Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities Affected: through 15.0\(1\)ES01 |
| CVE-2023-20058 | 6.1 | Jan 20 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: before 12.5\(1\)_su2_es05; 12.5\(1\)_su2 before 12.5\(1\)_su2_es05 |
| CVE-2021-1395 | 6.1 | Jun 16 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 12.5\(1\) |
| CVE-2021-1463 | 6.1 | Apr 8 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: through 12.0\(1\); 12.5\(1\) before 12.5\(1\)su1 |
| CVE-2019-15278 | 6.1 | Jan 26 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information… Affected: 12.0(1) |
| CVE-2019-15259 | 6.1 | Oct 2 | A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack Affected: before 11.6\(2\); 12.0(1) |
| CVE-2018-0401 | 6.1 | Jul 18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct… Affected: 11.5(1) |
| CVE-2018-0400 | 6.1 | Jul 18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct… Affected: 11.5(1) |
| CVE-2017-6722 | 6.1 | Jul 4 | A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to… Affected: 11.5(1); 11.5.1es01; 11.5.1su1 |
| CVE-2016-6425 | 6.1 | Oct 6 | Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1),… Affected: 10.0(1); 10.5(1); 10.6(1); 11.0(1) |
| CVE-2016-1298 | 6.1 | Jan 26 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web… Affected: 10.0(1); 10.5(1); 10.6(1); 11.0(1) |
| CVE-2025-20129 | 5.4 | Jun 4 | A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to… Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2023-20096 | 5.4 | Apr 5 | A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to perform a stored… Affected: before 12.5\(1\)su3 |
| CVE-2025-20288 | 5.3 | Jul 16 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery… Affected: 10.5(1); 10.5(1)su1; 10.5(1)su1es10; 10.6(1); 10.6(1)su1; 10.6(1)su2; +34 more |
| CVE-2023-20232 | 5.3 | Aug 16 | A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to cause a web cache poisoning… Affected: before 12.5\(1\)_su2_es05 |
| CVE-2025-20374 | 4.9 | Nov 5 | A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary resources Affected: before 12.5\(1\)_su03_es07; 15.0 |
| CVE-2025-20279 | 4.8 | Jun 4 | A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to conduct a stored XSS attack on an affected system Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2019-12626 | 4.8 | Aug 21 | A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to conduct a stored… Affected: 12.5(1) |
| CVE-2025-20114 | 4.3 | May 21 | A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected… Affected: 8.5(1); 9.0(2)su3es04; 10.0(1)su1; 10.0(1)su1es04; 10.5(1); 10.5(1)su1; +34 more |
| CVE-2023-20062 | 4.3 | Mar 3 | Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request… Affected: All versions, or not specified |
Showing 23