Cisco Unified Contact Center Express (Cisco) - vulnerabilities (CVEs)

36 CVEs, 0 in the last 30 days, 68 known versions, newest CVE from 2026-03-11. Vendor: Cisco.

CVEs of Cisco Unified Contact Center Express

CVE-2026-20116 - CVSS 6.1 (medium), 2026-03-11: A vulnerability in the web-based management interface of  Cisco Finesse, Cisco Packaged Contact Center Enterprise (Packaged CCE), Cisco Unified Contact…
CVE-2026-20117 - CVSS 6.1 (medium), 2026-03-11: A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to…
CVE-2025-20377 - CVSS 4.3 (medium), 2025-11-05: A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from…
CVE-2025-20375 - CVSS 7.2 (high), 2025-11-05: A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is…
CVE-2025-20374 - CVSS 4.9 (medium), 2025-11-05: A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary…
CVE-2025-20358 - CVSS 9.8 (critical), 2025-11-05: A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass…
CVE-2025-20376 - CVSS 7.2 (high), 2025-11-05: A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is…
CVE-2025-20354 - CVSS 9.8 (critical), 2025-11-05: A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary…
CVE-2025-20288 - CVSS 5.8 (medium), 2025-07-16: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a…
CVE-2025-20274 - CVSS 8.8 (high), 2025-07-16: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary…
CVE-2025-20279 - CVSS 4.8 (medium), 2025-06-04: A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to conduct a stored XSS attack on an…
CVE-2025-20276 - CVSS 7.2 (high), 2025-06-04: A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an…
CVE-2025-20275 - CVSS 7.8 (high), 2025-06-04: A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute…
CVE-2025-20278 - CVSS 6.7 (medium), 2025-06-04: A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2025-20277 - CVSS 6.7 (medium), 2025-06-04: A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an…
CVE-2025-20129 - CVSS 5.4 (medium), 2025-06-04: A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated,…
CVE-2025-20113 - CVSS 7.1 (high), 2025-05-21: A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of…
CVE-2025-20112 - CVSS 5.1 (medium), 2025-05-21: A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate…
CVE-2025-20114 - CVSS 4.3 (medium), 2025-05-21: A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation…
CVE-2024-20405 - CVSS 6.1 (medium), 2024-06-05: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by…
CVE-2024-20404 - CVSS 7.2 (high), 2024-06-05: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an…
CVE-2024-20253 - CVSS 10 (critical), 2024-01-26: A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute…
CVE-2023-20232 - CVSS 5.3 (medium), 2023-08-16: A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to cause a…
CVE-2023-20096 - CVSS 5.4 (medium), 2023-04-05: A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to…
CVE-2023-20058 - CVSS 6.1 (medium), 2023-01-20: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a…
CVE-2021-1395 - CVSS 6.1 (medium), 2021-06-16: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a…
CVE-2021-1358 - CVSS 6.1 (medium), 2021-05-22: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to redirect a user to an undesired web…
CVE-2021-1254 - CVSS 4.8 (medium), 2021-05-22: Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site…
CVE-2021-1463 - CVSS 6.1 (medium), 2021-04-08: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct…
CVE-2019-1888 - CVSS 7.2 (high), 2020-09-23: A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to…
CVE-2020-3267 - CVSS 7.1 (high), 2020-06-03: A vulnerability in the API subsystem of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to change the…
CVE-2020-3280 - CVSS 9.8 (critical), 2020-05-22: A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker…
CVE-2019-15259 - CVSS 6.1 (medium), 2019-10-02: A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting…
CVE-2019-12633 - CVSS 7.5 (high), 2019-09-05: A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a…
CVE-2019-12626 - CVSS 4.8 (medium), 2019-08-21: A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to…
CVE-2019-1670 - CVSS 6.1 (medium), 2019-02-07: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct…