Unified Intelligence Center vulnerabilities | LiveThreat CVE Feed

Product

Unified Intelligence Center

by Cisco · last CVE Jul 16, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities25 In the news0 Timeline

Severity mix

Critical 1High 8Medium 14Low 0

Severity

All severities25 Critical1 High8 Medium14 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unified Intelligence Center to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-12337	9.8	6%	Nov 16	A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote… Affected: All versions, or not specified
CVE-2025-20274	8.8	0%	Jul 16	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary files to an affected… Affected: 10.5(1); 11.0(1); 11.0(2); 11.0(3); 11.5(1); 11.6(1); +7 more
CVE-2017-12253	8.8	1%	Sep 21	A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions Affected: 11.5(1)
CVE-2016-6427	8.8	1%	Oct 6	Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through… Affected: 8.5.4; 9.0(2); 9.1(1)
CVE-2017-6779	7.5	2%	Jun 7	Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,… Affected: 11.6 before 11.6\(1\); 9.5(1)
CVE-2016-6426	7.5	1%	Oct 5	The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1),… Affected: 8.5.4; 9.0(2); 9.1(1)
CVE-2019-1658	7.4	1%	Jan 24	Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability Affected: 11.6(1)
CVE-2025-20113	7.1	0%	May 21	A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an… Affected: 10.5(1); 11.0(1); 11.0(2); 11.0(3); 11.5(1); 11.6(1); +7 more
CVE-2024-20325	7.1	0%	Feb 21	A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to… Affected: before 12.5(1)_es03; 12.6(1) before 12.6(1)_es08; 12.6(2) before 12.6(2)ES02
CVE-2025-20278	6.7	0%	Jun 4	A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… Affected: before 12.6\(2\)es_04
CVE-2023-20061	6.5	1%	Mar 3	Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request… Affected: before 12.6\(2\)
CVE-2023-20058	6.1	0%	Jan 20	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: before 12.5\(1\)_es02; 12.6\(1\) before 12.6\(1\)_es06; 12.6\(1\)_es2 before 12.6\(1\)_es06
CVE-2021-1395	6.1	1%	Jun 16	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 12.0\(1\); 12.5(1)
CVE-2021-1463	6.1	1%	Apr 8	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: through 11.6\(1\)
CVE-2019-1670	6.1	1%	Feb 7	Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability Affected: 9.5(1)
CVE-2017-12254	6.1	2%	Sep 21	A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a Document Object Model (DOM)-based cross-site… Affected: 11.5(1)
CVE-2017-12248	6.1	2%	Sep 21	A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 11.5(1)
CVE-2017-6789	6.1	1%	Sep 7	A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a… Affected: 11.0(1)es10
CVE-2016-6425	6.1	1%	Oct 6	Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1),… Affected: 8.5.4; 9.0(2); 9.1(1)
CVE-2019-1860	5.9	1%	May 16	A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive… Affected: 12.0(1)
CVE-2025-20288	5.3	0%	Jul 16	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery… Affected: 10.5(1); 11.0(1); 11.0(2); 11.0(3); 11.5(1); 11.6(1); +7 more
CVE-2025-20114	4.3	0%	May 21	A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected… Affected: 10.5(1); 11.0(1); 11.0(2); 11.0(3); 11.5(1); 11.6(1); +7 more
CVE-2023-20062	4.3	1%	Mar 3	Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request… Affected: before 12.6\(2\)
CVE-2015-4274	–	1%	Jul 16	Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified Intelligence Center 10.0(1) and 10.6(1) allows remote attackers to hijack the authentication… Affected: 10.0(1); 10.6(1)
CVE-2015-0740	–	1%	May 20	Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID… Affected: 10.6(1)