# Cisco Unified Contact Center Express. Every CVE that names Cisco Unified Contact Center Express among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20117.md) `CVE-2026-20117` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 6.1 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site scripting (XSS) - [Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20116.md) `CVE-2026-20116` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 6.1 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site scripting (XSS) - [Cisco Unified Intelligence Center API Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-20377.md) `CVE-2025-20377` · CVE record: Cisco Cisco Packaged Contact Center Enterprise and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 5 Nov 2025 · Tags: Information disclosure - [Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability](https://agentprime.io/advisories/CVE-2025-20375.md) `CVE-2025-20375` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 6.5 Medium · Not analysed yet · Published 5 Nov 2025 · Tags: Unrestricted file upload - [Cisco Unified Contact Center Express Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20376.md) `CVE-2025-20376` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 6.5 Medium · Not analysed yet · Published 5 Nov 2025 · Tags: Unrestricted file upload - [Cisco Unified Contact Center Express Arbitrary File Download Vulnerability](https://agentprime.io/advisories/CVE-2025-20374.md) `CVE-2025-20374` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 4.9 Medium · Not analysed yet · Published 5 Nov 2025 · Tags: Path traversal - [Cisco Unified Contact Center Express Editor Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20358.md) `CVE-2025-20358` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2025 · Tags: Authentication bypass - [Cisco Unified Contact Center Express Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20354.md) `CVE-2025-20354` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2025 · Tags: Unrestricted file upload - [Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2025-20288.md) `CVE-2025-20288` · CVE record: Cisco Cisco Unified Contact Center Express and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 16 Jul 2025 · Tags: Server-side request forgery (SSRF) - [Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability](https://agentprime.io/advisories/CVE-2025-20274.md) `CVE-2025-20274` · CVE record: Cisco Cisco Unified Contact Center Express and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 16 Jul 2025 · Tags: Unrestricted file upload - [Cisco Unified Communications Products Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-20278.md) `CVE-2025-20278` · CVE record: Cisco Cisco Finesse and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 4 Jun 2025 · Tags: Command injection - [Cisco Unifed Contact Center Express Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2025-20279.md) `CVE-2025-20279` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 4.8 Medium · Not analysed yet · Published 4 Jun 2025 · Tags: Cross-site scripting (XSS) - [Cisco Unified Contact Center Express Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2025-20277.md) `CVE-2025-20277` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 3.4 Low · Not analysed yet · Published 4 Jun 2025 · Tags: Path traversal - [Cisco Unified Contact Center Express Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20276.md) `CVE-2025-20276` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 3.8 Low · Not analysed yet · Published 4 Jun 2025 · Tags: Insecure deserialization - [Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20275.md) `CVE-2025-20275` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2025 · Tags: Insecure deserialization - [Cisco Customer Collaboration Platform Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-20129.md) `CVE-2025-20129` · CVE record: Cisco Cisco SocialMiner and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 4 Jun 2025 · Tags: Information disclosure - [Cisco Unified Intelligence Center Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-20113.md) `CVE-2025-20113` · CVE record: Cisco Cisco Unified Contact Center Express and 1 more · CVSS 7.1 High · Not analysed yet · Published 21 May 2025 · Tags: CWE-602 - [Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability](https://agentprime.io/advisories/CVE-2025-20114.md) `CVE-2025-20114` · CVE record: Cisco Cisco Unified Contact Center Express and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 21 May 2025 · Tags: Broken access control - [Cisco Unified Communications Products Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-20112.md) `CVE-2025-20112` · CVE record: Cisco Cisco Emergency Responder and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2025 · Tags: Privilege escalation - [Improper input validation in Cisco Unified Contact Center Enterprise and others](https://agentprime.io/advisories/CVE-2024-20405.md) `CVE-2024-20405` · CVE record: Cisco Cisco Unified Contact Center Enterprise and 3 more · CVSS 4.8 Medium · Not analysed yet · Published 5 Jun 2024 · Tags: CWE-20 - [Server-side request forgery in Cisco Unified Contact Center Enterprise and others](https://agentprime.io/advisories/CVE-2024-20404.md) `CVE-2024-20404` · CVE record: Cisco Cisco Unified Contact Center Enterprise and 3 more · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.23 · Not analysed yet · Published 5 Jun 2024 · Tags: Server-side request forgery (SSRF) - [Deserialization of untrusted data in Cisco Unified Contact Center Enterprise and others](https://agentprime.io/advisories/CVE-2024-20253.md) `CVE-2024-20253` · CVE record: Cisco Cisco Unified Contact Center Enterprise and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jan 2024 · Tags: Insecure deserialization - [Improper input validation in Cisco Unified Contact Center Express](https://agentprime.io/advisories/CVE-2023-20232.md) `CVE-2023-20232` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: CWE-20 - [Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2023-20096.md) `CVE-2023-20096` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 5.4 Medium · Not analysed yet · Published 5 Apr 2023 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in Cisco Unified Contact Center Enterprise and others](https://agentprime.io/advisories/CVE-2023-20058.md) `CVE-2023-20058` · CVE record: Cisco Cisco Unified Contact Center Enterprise and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 19 Jan 2023 · Tags: Cross-site scripting (XSS) - [Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2021-1395.md) `CVE-2021-1395` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 4.7 Medium · Not analysed yet · Published 16 Jun 2021 · Tags: Cross-site scripting (XSS) - [Cisco Finesse Open Redirect Vulnerability](https://agentprime.io/advisories/CVE-2021-1358.md) `CVE-2021-1358` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 4.7 Medium · Not analysed yet · Published 22 May 2021 · Tags: Open redirect - [Cisco Finesse Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1254.md) `CVE-2021-1254` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 4.8 Medium · Not analysed yet · Published 22 May 2021 · Tags: Cross-site scripting (XSS) - [Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2021-1463.md) `CVE-2021-1463` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 6.1 Medium · Not analysed yet · Published 8 Apr 2021 · Tags: Cross-site scripting (XSS) - [Cisco Unified Contact Center Express Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1888.md) `CVE-2019-1888` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 7.2 High · Not analysed yet · Published 23 Sept 2020 · Tags: Unrestricted file upload - [Cisco Unified Contact Center Express Improper API Authorization Vulnerability](https://agentprime.io/advisories/CVE-2020-3267.md) `CVE-2020-3267` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 5.4 Medium · Not analysed yet · Published 3 Jun 2020 · Tags: Broken access control - [Cisco Unified Contact Center Express Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-3280.md) `CVE-2020-3280` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 May 2020 · Tags: CWE-20 - [Cisco Unified Contact Center Express HTTP Response Splitting Vulnerability](https://agentprime.io/advisories/CVE-2019-15259.md) `CVE-2019-15259` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 6.1 Medium · Not analysed yet · Published 2 Oct 2019 · Tags: Other injection - [Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2019-12633.md) `CVE-2019-12633` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 5.3 Medium · Not analysed yet · Published 5 Sept 2019 · Tags: CWE-20 - [Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2019-12626.md) `CVE-2019-12626` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 4.8 Medium · Not analysed yet · Published 21 Aug 2019 · Tags: CWE-20 - [Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2019-1670.md) `CVE-2019-1670` · CVE record: Cisco Cisco Unified Contact Center Express · CVSS 6.1 Medium · Not analysed yet · Published 7 Feb 2019 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in Cisco Unified Contact Center Express](https://agentprime.io/advisories/CVE-2017-12288.md) `CVE-2017-12288` · CVE record: Cisco Unified Contact Center Express · No CVSS score · Not analysed yet · Published 19 Oct 2017 · Tags: Cross-site scripting (XSS) - [Cisco Unified Contact Center Express: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco…](https://agentprime.io/advisories/CVE-2017-6722.md) `CVE-2017-6722` · CVE record: Cisco Unified Contact Center Express · No CVSS score · Not analysed yet · Published 4 Jul 2017 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .