Skip to content
fr Sign in
4.3 Medium

CVE-2025-20377 A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote…

Description

A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system. This vulnerability is due to improper validation of requests to certain API endpoints. An attacker could exploit this vulnerability by sending a valid request to a specific API endpoint within the affected system. A successful exploit could allow a low-privileged user to view sensitive information on the affected system that should be restricted. To exploit this vulnerability, the attacker must have valid user credentials on the affected system.

Affected products and versions

Product Affected versions Fixed in
Cisco Packaged Contact Center Enterprise Versions not published
Cisco Unified Contact Center Enterprise 11.5 No fix stated
Cisco Unified Contact Center Enterprise 11.0 No fix stated
Cisco Unified Contact Center Enterprise 10.5 No fix stated
Cisco Unified Contact Center Express Versions not published
Cisco Unified Intelligence Center Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Packaged Contact Center Enterprise

The 10 CVEs of Cisco Packaged Contact Center Enterprise →
CVE-2026-20314 A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise… 5.0 Medium CVE-2026-20109 Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged… 4.8 Medium CVE-2026-20055 Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged… 4.8 Medium CVE-2024-20405 A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker… 4.8 Medium
Track this CVE