CVE-2025-20275

Cisco Unified Contact Center Express Editor contains a vulnerability due to insecure Java deserialization in the file-opening flow. An attacker could trigger arbitrary-code execution on the host by convincing a local authenticated user to open a crafted .aef file, running with the user’s privileg...

CVE-2025-20273

The CVE-2025-20273 vulnerability affects Cisco Unified Intelligent Contact Management Enterprise web-based management interface. It is an XSS flaw caused by insufficient input validation that can be triggered when a user clicks a crafted link, allowing an unauthenticated, remote attacker to execu...

Cisco Unified Contact Center Express Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express Unified CCX could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack or execute arbitrary code on an affected device. To exploit these vulnerabilities, t...

Cisco Unified Communications Products Command Injection Vulnerability

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied...

Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability

A vulnerability in the file opening process of Cisco Unified Contact Center Express Unified CCX Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attack...

Cisco Unified CCX 代码问题漏洞

Cisco Unified CCX is a contact center software from Cisco USA. A code issue vulnerability exists in Cisco Unified CCX that stems from insecure deserialization of Java objects, which could lead to the execution of arbitrary code...

PT-2025-23827 · Cisco · Cisco Unified Ccx

Name of the Vulnerable Software and Affected Versions: Cisco Unified CCX affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct a stored XSS attack on an affected system. This is due to improper...

Cisco Unified Contact Center Express Editor 代码问题漏洞

Cisco Unified Contact Center Express Editor is an all-in-one call center solution for small and medium-sized businesses from Cisco. A code issue vulnerability exists in Cisco Unified Contact Center Express Editor that stems from insecure deserialization of Java objects, which could lead to the...

Cisco Unified CCX 跨站脚本漏洞

Cisco Unified CCX is a contact center software from Cisco. A cross-site scripting vulnerability exists in Cisco Unified CCX that stems from improper user input cleanup and could lead to a stored cross-site scripting attack...

PT-2025-23822 · Cisco · Cisco Unified Intelligent Contact Management Enterprise

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligent Contact Management Enterprise affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS...

PT-2025-23824 · Cisco · Cisco Unified Ccx

Name of the Vulnerable Software and Affected Versions: Cisco Unified CCX affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitrary code on an affected device. The attacker must have valid...

PT-2025-23823 · Cisco · Cisco Unified Ccx Editor

Name of the Vulnerable Software and Affected Versions: Cisco Unified Contact Center Express Unified CCX Editor affected versions not specified Description: The issue is related to insecure deserialization of Java objects by the affected software. An attacker could exploit this by persuading an...

Cisco Unified Intelligent Contact Management Enterprise 跨站脚本漏洞

Cisco Unified Intelligent Contact Management Enterprise is an intelligent contact management enterprise edition from Cisco. A cross-site scripting vulnerability exists in Cisco Unified Intelligent Contact Management Enterprise that stems from insufficient input validation and could lead to a...

Cisco Unified CCX 路径遍历漏洞

Cisco Unified CCX is a contact center software from Cisco. A path traversal vulnerability exists in Cisco Unified CCX that stems from improperly restricted path traversal and could lead to the execution of arbitrary code...

Cisco Unified Communications 命令注入漏洞

Cisco Unified Communications is an enterprise call control and session management platform from Cisco that connects people anywhere using any device. A command injection vulnerability exists in Cisco Unified Communications that stems from insufficient validation of command parameters and can be...

PT-2025-23826 · Cisco · Cisco Unified Communications

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications products affected versions not specified Description: A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the...

PT-2025-23825 · Cisco · Cisco Unified Ccx

Name of the Vulnerable Software and Affected Versions: Cisco Unified CCX affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, local attacker to execute arbitrary code on an affected device. The issue is due to improper...

Cisco Integrated Management Controller 安全漏洞

Cisco Integrated Management Controller IMC is a suite of software from Cisco USA for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down, and rebooting servers. A security vulnerability exists in...

Cisco Unified Communications Manager (CUCM) Privilege Escalation (cisco-sa-cucm-kkhZbHR5)

According to its self-reported version, Cisco Unified Communications Products is affected by a privilege escalation vulnerability. - A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to...

CVE-2025-20114

A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker...