Advisories · Technology

Cisco Unified Contact Center Express.

Every CVE that names Cisco Unified Contact Center Express among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-20117 CVE record

CVSS 6.1 Medium

Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities
- Cisco Unified Contact Center Express
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2026
CVE-2026-20116 CVE record

CVSS 6.1 Medium

Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities
- Cisco Unified Contact Center Express
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2026
CVE-2025-20377 CVE record

CVSS 4.3 Medium

Cisco Unified Intelligence Center API Information Disclosure Vulnerability
- Cisco Packaged Contact Center Enterprise
- Cisco Unified Contact Center Enterprise
- Information disclosure
Not analysed yet 5 Nov 2025
CVE-2025-20375 CVE record

CVSS 6.5 Medium

Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability
- Cisco Unified Contact Center Express
- Unrestricted file upload
Not analysed yet 5 Nov 2025
CVE-2025-20376 CVE record

CVSS 6.5 Medium

Cisco Unified Contact Center Express Remote Code Execution Vulnerability
- Cisco Unified Contact Center Express
- Unrestricted file upload
Not analysed yet 5 Nov 2025
CVE-2025-20374 CVE record

CVSS 4.9 Medium

Cisco Unified Contact Center Express Arbitrary File Download Vulnerability
- Cisco Unified Contact Center Express
- Path traversal
Not analysed yet 5 Nov 2025
CVE-2025-20358 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Cisco Unified Contact Center Express Editor Authentication Bypass Vulnerability
- Cisco Unified Contact Center Express
- Authentication bypass
Not analysed yet 5 Nov 2025
CVE-2025-20354 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Unified Contact Center Express Remote Code Execution Vulnerability
- Cisco Unified Contact Center Express
- Unrestricted file upload
Not analysed yet 5 Nov 2025
CVE-2025-20288 CVE record

CVSS 5.8 Medium

Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerability
- Cisco Unified Contact Center Express
- Cisco Unified Intelligence Center
- Server-side request forgery (SSRF)
Not analysed yet 16 Jul 2025
CVE-2025-20274 CVE record

CVSS 6.3 Medium

Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability
- Cisco Unified Contact Center Express
- Cisco Unified Intelligence Center
- Unrestricted file upload
Not analysed yet 16 Jul 2025
CVE-2025-20278 CVE record

CVSS 6.0 Medium

Cisco Unified Communications Products Command Injection Vulnerability
- Cisco Finesse
- Cisco SocialMiner
- Command injection
Not analysed yet 4 Jun 2025
CVE-2025-20279 CVE record

CVSS 4.8 Medium

Cisco Unifed Contact Center Express Stored Cross-Site Scripting Vulnerability
- Cisco Unified Contact Center Express
- Cross-site scripting (XSS)
Not analysed yet 4 Jun 2025
CVE-2025-20277 CVE record

CVSS 3.4 Low

Cisco Unified Contact Center Express Path Traversal Vulnerability
- Cisco Unified Contact Center Express
- Path traversal
Not analysed yet 4 Jun 2025
CVE-2025-20276 CVE record

CVSS 3.8 Low

Cisco Unified Contact Center Express Remote Code Execution Vulnerability
- Cisco Unified Contact Center Express
- Insecure deserialization
Not analysed yet 4 Jun 2025
CVE-2025-20275 CVE record

CVSS 5.3 Medium

Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability
- Cisco Unified Contact Center Express
- Insecure deserialization
Not analysed yet 4 Jun 2025
CVE-2025-20129 CVE record

CVSS 4.3 Medium

Cisco Customer Collaboration Platform Information Disclosure Vulnerability
- Cisco SocialMiner
- Cisco Unified Contact Center Express
- Information disclosure
Not analysed yet 4 Jun 2025
CVE-2025-20113 CVE record

CVSS 7.1 High

Cisco Unified Intelligence Center Privilege Escalation Vulnerability
- Cisco Unified Contact Center Express
- Cisco Unified Intelligence Center
- CWE-602
Not analysed yet 21 May 2025
CVE-2025-20114 CVE record

CVSS 4.3 Medium

Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability
- Cisco Unified Contact Center Express
- Cisco Unified Intelligence Center
- Broken access control
Not analysed yet 21 May 2025
CVE-2025-20112 CVE record

CVSS 5.1 Medium

Cisco Unified Communications Products Privilege Escalation Vulnerability
- Cisco Emergency Responder
- Cisco Finesse
- Privilege escalation
Not analysed yet 21 May 2025
CVE-2024-20405 CVE record

CVSS 4.8 Medium

Improper input validation in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unified Contact Center Express
- CWE-20
Not analysed yet 5 Jun 2024
CVE-2024-20404 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

Server-side request forgery in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unified Contact Center Express
- Server-side request forgery (SSRF)
Not analysed yet 5 Jun 2024
CVE-2024-20253 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unity Connection
- Insecure deserialization
Not analysed yet 26 Jan 2024
CVE-2023-20232 CVE record

CVSS 5.3 Medium

Improper input validation in Cisco Unified Contact Center Express
- Cisco Unified Contact Center Express
- CWE-20
Not analysed yet 16 Aug 2023
CVE-2023-20096 CVE record

CVSS 5.4 Medium

Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability
- Cisco Unified Contact Center Express
- Cross-site scripting (XSS)
Not analysed yet 5 Apr 2023
CVE-2023-20058 CVE record

CVSS 6.1 Medium

Cross-site scripting in Cisco Unified Contact Center Enterprise and others
- Cisco Unified Contact Center Enterprise
- Cisco Unified Contact Center Express
- Cross-site scripting (XSS)
Not analysed yet 19 Jan 2023
CVE-2021-1395 CVE record

CVSS 4.7 Medium

Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability
- Cisco Unified Contact Center Express
- Cross-site scripting (XSS)
Not analysed yet 16 Jun 2021
CVE-2021-1358 CVE record

CVSS 4.7 Medium

Cisco Finesse Open Redirect Vulnerability
- Cisco Unified Contact Center Express
- Open redirect
Not analysed yet 22 May 2021
CVE-2021-1254 CVE record

CVSS 4.8 Medium

Cisco Finesse Cross-Site Scripting Vulnerabilities
- Cisco Unified Contact Center Express
- Cross-site scripting (XSS)
Not analysed yet 22 May 2021
CVE-2021-1463 CVE record

CVSS 6.1 Medium

Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability
- Cisco Unified Contact Center Express
- Cross-site scripting (XSS)
Not analysed yet 8 Apr 2021
CVE-2019-1888 CVE record

CVSS 7.2 High

Cisco Unified Contact Center Express Privilege Escalation Vulnerability
- Cisco Unified Contact Center Express
- Unrestricted file upload
Not analysed yet 23 Sept 2020
CVE-2020-3267 CVE record

CVSS 5.4 Medium

Cisco Unified Contact Center Express Improper API Authorization Vulnerability
- Cisco Unified Contact Center Express
- Broken access control
Not analysed yet 3 Jun 2020
CVE-2020-3280 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Unified Contact Center Express Remote Code Execution Vulnerability
- Cisco Unified Contact Center Express
- CWE-20
Not analysed yet 22 May 2020
CVE-2019-15259 CVE record

CVSS 6.1 Medium

Cisco Unified Contact Center Express HTTP Response Splitting Vulnerability
- Cisco Unified Contact Center Express
- Other injection
Not analysed yet 2 Oct 2019
CVE-2019-12633 CVE record

CVSS 5.3 Medium

Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability
- Cisco Unified Contact Center Express
- CWE-20
Not analysed yet 5 Sept 2019
CVE-2019-12626 CVE record

CVSS 4.8 Medium

Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability
- Cisco Unified Contact Center Express
- CWE-20
Not analysed yet 21 Aug 2019
CVE-2019-1670 CVE record

CVSS 6.1 Medium

Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability
- Cisco Unified Contact Center Express
- Cross-site scripting (XSS)
Not analysed yet 7 Feb 2019
CVE-2017-12288 CVE record

Cross-site scripting in Cisco Unified Contact Center Express
- Cisco Unified Contact Center Express
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2017
CVE-2017-6722 CVE record

Cisco Unified Contact Center Express: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco…
- Cisco Unified Contact Center Express
Not analysed yet 4 Jul 2017