Advisories · Technology

Cisco Unified Contact Center Enterprise.

Every CVE that names Cisco Unified Contact Center Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-20314 CVE record

CVSS 5.0 Medium

Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
- Cisco Packaged Contact Center Enterprise
- Cisco Unified Contact Center Enterprise
- Server-side request forgery (SSRF)
Not analysed yet 19 Aug 2026
CVE-2026-20109 CVE record

CVSS 4.8 Medium

Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability
- Cisco Packaged Contact Center Enterprise
- Cisco Unified Contact Center Enterprise
- Cross-site scripting (XSS)
Not analysed yet 21 Jan 2026
CVE-2026-20055 CVE record

CVSS 4.8 Medium

Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability
- Cisco Packaged Contact Center Enterprise
- Cisco Unified Contact Center Enterprise
- Cross-site scripting (XSS)
Not analysed yet 21 Jan 2026
CVE-2025-20377 CVE record

CVSS 4.3 Medium

Cisco Unified Intelligence Center API Information Disclosure Vulnerability
- Cisco Packaged Contact Center Enterprise
- Cisco Unified Contact Center Enterprise
- Information disclosure
Not analysed yet 5 Nov 2025
CVE-2025-20242 CVE record

CVSS 6.5 Medium

Improper access control in Cisco Unified Contact Center Enterprise
- Cisco Unified Contact Center Enterprise
- Broken access control
Not analysed yet 21 May 2025
CVE-2024-20405 CVE record

CVSS 4.8 Medium

Improper input validation in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unified Contact Center Express
- CWE-20
Not analysed yet 5 Jun 2024
CVE-2024-20404 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

Server-side request forgery in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unified Contact Center Express
- Server-side request forgery (SSRF)
Not analysed yet 5 Jun 2024
CVE-2024-20253 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unity Connection
- Insecure deserialization
Not analysed yet 26 Jan 2024
CVE-2023-20088 CVE record

CVSS 5.3 Medium

Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability
- Cisco Unified Contact Center Enterprise
- Broken access control
Not analysed yet 3 Mar 2023
CVE-2023-20058 CVE record

CVSS 6.1 Medium

Cross-site scripting in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unified Contact Center Express
- Cross-site scripting (XSS)
Not analysed yet 19 Jan 2023
CVE-2020-3163 CVE record

CVSS 6.8 Medium

Cisco Unified Contact Center Enterprise Denial of Service Vulnerability
- Cisco Unified Contact Center Enterprise
- Race condition
Not analysed yet 19 Feb 2020