6.5
Medium
CVE-2025-20242 A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an…
Description
A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this vulnerability by sending crafted TCP data to a specific port on an affected device. A successful exploit could allow the attacker to read or modify data on the affected device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Unified Contact Center Enterprise | Versions not published |
References
- cisco-sa-contcent-insuffacces-ArDOVhN8 sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Unified Contact Center Enterprise
The 11 CVEs of Cisco Unified Contact Center Enterprise →
CVE-2026-20314
A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise…
5.0
Medium
CVE-2026-20109
Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged…
4.8
Medium
CVE-2026-20055
Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged…
4.8
Medium
CVE-2025-20377
A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote…
4.3
Medium