Unified Intelligence Center vulnerabilities | LiveThreat CVE Feed

Product

Unified Intelligence Center

by Cisco · last CVE Jul 16, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities25 In the news0 Timeline

Severity mix

Critical 1High 8Medium 14Low 0

Severity

All severities25 Critical1 High8 Medium14 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unified Intelligence Center to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-20278	6.7	0%	Jun 4	Cisco Unified Communications Products Command Injection Vulnerability Affected: before 12.6\(2\)es_04
CVE-2023-20061	6.5	1%	Mar 3	Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request… Affected: before 12.6\(2\)
CVE-2023-20058	6.1	0%	Jan 20	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: before 12.5\(1\)_es02; 12.6\(1\) before 12.6\(1\)_es06; 12.6\(1\)_es2 before 12.6\(1\)_es06
CVE-2021-1395	6.1	1%	Jun 16	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 12.0\(1\); 12.5(1)
CVE-2021-1463	6.1	1%	Apr 8	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: through 11.6\(1\)
CVE-2019-1670	6.1	1%	Feb 7	Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability Affected: 9.5(1)
CVE-2017-12254	6.1	2%	Sep 21	A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a Document Object Model (DOM)-based cross-site… Affected: 11.5(1)
CVE-2017-12248	6.1	2%	Sep 21	A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 11.5(1)
CVE-2017-6789	6.1	1%	Sep 7	A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a… Affected: 11.0(1)es10
CVE-2016-6425	6.1	1%	Oct 6	Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1),… Affected: 8.5.4; 9.0(2); 9.1(1)
CVE-2019-1860	5.9	1%	May 16	A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive… Affected: 12.0(1)
CVE-2025-20288	5.3	0%	Jul 16	Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerability Affected: 10.5(1); 11.0(1); 11.0(2); 11.0(3); 11.5(1); 11.6(1); +7 more
CVE-2025-20114	4.3	0%	May 21	Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability Affected: 10.5(1); 11.0(1); 11.0(2); 11.0(3); 11.5(1); 11.6(1); +7 more
CVE-2023-20062	4.3	1%	Mar 3	Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request… Affected: before 12.6\(2\)