4.3 Moyenne

CVE-2025-20377 A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote…

Description

A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system. This vulnerability is due to improper validation of requests to certain API endpoints. An attacker could exploit this vulnerability by sending a valid request to a specific API endpoint within the affected system. A successful exploit could allow a low-privileged user to view sensitive information on the affected system that should be restricted. To exploit this vulnerability, the attacker must have valid user credentials on the affected system.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Packaged Contact Center Enterprise	Versions non publiées
Cisco Unified Contact Center Enterprise	11.5	Pas de correctif indiqué
Cisco Unified Contact Center Enterprise	11.0	Pas de correctif indiqué
Cisco Unified Contact Center Enterprise	10.5	Pas de correctif indiqué
Cisco Unified Contact Center Express	Versions non publiées
Cisco Unified Intelligence Center	Versions non publiées

Références

cisco-sa-cc-mult-vuln-gK4TFXSn sec.cloudapps.cisco.com

Chronologie

Publiée 5 novembre 2025
Dernière modification 21 novembre 2025

Les 10 CVE de Cisco Packaged Contact Center Enterprise →

CVE-2026-20314 A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise… 5.0 Moyenne CVE-2026-20109 Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged… 4.8 Moyenne CVE-2026-20055 Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged… 4.8 Moyenne CVE-2024-20405 A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker… 4.8 Moyenne

Suivre cette CVE