Cisco Cisco Unified Contact Center Express
36 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-20117 | 10.5(1)SU1 ; 10.6(1) ; 11.6(1) ; … | Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-20116 | 10.5(1)SU1 ; 10.6(1) ; 11.6(1) ; … | Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities | MEDIUM 6.1 | 0.2 % | ||
| CVE-2025-20377 | 10.5(1)SU1 ; 10.6(1) ; 11.6(1) ; … | Cisco Unified Intelligence Center API Information Disclosure Vulnerability | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-20375 | 10.5(1)SU1 ; 10.6(1) ; 11.6(1) ; … | Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability | HIGH 7.2 | 0.4 % | ||
| CVE-2025-20376 | 10.5(1)SU1 ; 10.6(1) ; 11.6(1) ; … | Cisco Unified Contact Center Express Remote Code Execution Vulnerability | HIGH 7.2 | 0.5 % | ||
| CVE-2025-20374 | 10.5(1)SU1 ; 10.6(1) ; 11.6(1) ; … | Cisco Unified Contact Center Express Arbitrary File Download Vulnerability | MEDIUM 4.9 | 1.1 % | ||
| CVE-2025-20358 | 10.5(1)SU1 ; 10.6(1) ; 11.6(1) ; … | Cisco Unified Contact Center Express Editor Authentication Bypass Vulnerability | CRITICAL 9.8 | 0.9 % | ||
| CVE-2025-20354 | 10.5(1)SU1 ; 10.6(1) ; 11.6(1) ; … | Cisco Unified Contact Center Express Remote Code Execution Vulnerability | CRITICAL 9.8 | 0.9 % | ||
| CVE-2025-20288 | 10.6(1) ; 10.5(1)SU1 ; 10.6(1)SU3 ; … | Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerability | MEDIUM 5.8 | 0.4 % | ||
| CVE-2025-20274 | 10.6(1) ; 10.5(1)SU1 ; 10.6(1)SU3 ; … | Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability | HIGH 8.8 | 0.5 % | ||
| CVE-2025-20279 | 10.6(1) ; 10.5(1)SU1 ; 10.6(1)SU3 ; … | Cisco Unifed Contact Center Express Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-20278 | 10.6(1) ; 10.5(1)SU1 ; 10.6(1)SU3 ; … | Cisco Unified Communications Products Command Injection Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20277 | 10.6(1) ; 10.5(1)SU1 ; 10.6(1)SU3 ; … | Cisco Unified Contact Center Express Path Traversal Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20276 | 10.6(1) ; 10.5(1)SU1 ; 10.6(1)SU3 ; … | Cisco Unified Contact Center Express Remote Code Execution Vulnerability | HIGH 7.2 | 0.5 % | ||
| CVE-2025-20275 | 10.6(1) ; 10.5(1)SU1 ; 10.6(1)SU3 ; … | Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability | HIGH 7.8 | 0.2 % | ||
| CVE-2025-20129 | 10.6(1) ; 10.5(1)SU1 ; 10.6(1)SU3 ; … | Cisco Customer Collaboration Platform Information Disclosure Vulnerability | MEDIUM 5.4 | 0.4 % | ||
| CVE-2025-20113 | 10.6(1) ; 10.5(1)SU1 ; 10.6(1)SU3 ; … | Cisco Unified Intelligence Center Privilege Escalation Vulnerability | HIGH 7.1 | 0.4 % | ||
| CVE-2025-20114 | 10.6(1) ; 10.5(1)SU1 ; 10.6(1)SU3 ; … | Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability | MEDIUM 4.3 | 0.4 % | ||
| CVE-2025-20112 | | Cisco Unified Communications Products Privilege Escalation Vulnerability | MEDIUM 5.1 | 0.1 % | ||
| CVE-2024-20405 | N/A | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored X | MEDIUM 6.1 | 0.6 % | ||
| CVE-2024-20404 | N/A | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF at | HIGH 7.2 | 23 % | ||
| CVE-2024-20253 | 8.5(1) ; 9.0(2)SU3ES04 ; 10.0(1)SU1 ; … | A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attack | CRITICAL 10.0 | 2.4 % | ||
| CVE-2023-20232 | 8.5(1) ; 9.0(2)SU3ES04 ; 10.0(1)SU1 ; … | A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote a | MEDIUM 5.3 | 0.5 % | ||
| CVE-2023-20096 | n/a | Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-20058 | 11.0(1)SU1 ; 12.0(1) ; 12.5(1) ; … | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker t | MEDIUM 6.1 | 0.5 % | ||
| CVE-2021-1395 | n/a | Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.8 % | ||
| CVE-2021-1358 | n/a | Cisco Finesse Open Redirect Vulnerability | MEDIUM 6.1 | 0.8 % | ||
| CVE-2021-1254 | n/a | Cisco Finesse Cross-Site Scripting Vulnerabilities | MEDIUM 4.8 | 0.7 % | ||
| CVE-2021-1463 | n/a | Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.9 % | ||
| CVE-2019-1888 | n/a | Cisco Unified Contact Center Express Privilege Escalation Vulnerability | HIGH 7.2 | 3.4 % | ||
| CVE-2020-3267 | n/a | Cisco Unified Contact Center Express Improper API Authorization Vulnerability | HIGH 7.1 | 0.8 % | ||
| CVE-2020-3280 | n/a | Cisco Unified Contact Center Express Remote Code Execution Vulnerability | CRITICAL 9.8 | 7.1 % | ||
| CVE-2019-15259 | unspecified – < n/a | Cisco Unified Contact Center Express HTTP Response Splitting Vulnerability | MEDIUM 6.1 | 1.1 % | ||
| CVE-2019-12633 | unspecified – < 12.0(1)SU0.1 | Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability | HIGH 7.5 | 1.5 % | ||
| CVE-2019-12626 | unspecified – < 12.0(1)ES02 | Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.8 % | ||
| CVE-2019-1670 | n/a | Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 1.2 % |