Unified Contact Center Express (Cisco) - vulnerabilities (CVEs)

47 CVEs, 0 in the last 30 days, 91 known versions, newest CVE from 2026-03-11. Vendor: Cisco.

CVEs of Unified Contact Center Express

CVE-2026-20117 - CVSS 6.1 (medium), 2026-03-11: A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to…
CVE-2025-20376 - CVSS 7.2 (high), 2025-11-05: A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is…
CVE-2025-20375 - CVSS 7.2 (high), 2025-11-05: A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is…
CVE-2025-20374 - CVSS 4.9 (medium), 2025-11-05: A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary…
CVE-2025-20358 - CVSS 9.8 (critical), 2025-11-05: A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass…
CVE-2025-20354 - CVSS 9.8 (critical), 2025-11-05: A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary…
CVE-2025-20288 - CVSS 5.8 (medium), 2025-07-16: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a…
CVE-2025-20274 - CVSS 8.8 (high), 2025-07-16: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary…
CVE-2025-20279 - CVSS 4.8 (medium), 2025-06-04: A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to conduct a stored XSS attack on an…
CVE-2025-20276 - CVSS 7.2 (high), 2025-06-04: A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an…
CVE-2025-20275 - CVSS 7.8 (high), 2025-06-04: A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute…
CVE-2025-20278 - CVSS 6.7 (medium), 2025-06-04: A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2025-20277 - CVSS 6.7 (medium), 2025-06-04: A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an…
CVE-2025-20129 - CVSS 5.4 (medium), 2025-06-04: A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated,…
CVE-2025-20114 - CVSS 4.3 (medium), 2025-05-21: A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation…
CVE-2025-20113 - CVSS 7.1 (high), 2025-05-21: A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of…
CVE-2024-20253 - CVSS 10 (critical), 2024-01-26: A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute…
CVE-2023-20232 - CVSS 5.3 (medium), 2023-08-16: A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to cause a…
CVE-2023-20096 - CVSS 5.4 (medium), 2023-04-05: A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to…
CVE-2023-20062 - CVSS 6.5 (medium), 2023-03-03: Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a…
CVE-2023-20061 - CVSS 6.5 (medium), 2023-03-03: Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a…
CVE-2023-20058 - CVSS 6.1 (medium), 2023-01-20: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a…
CVE-2022-20658 - CVSS 9.6 (critical), 2022-01-14: A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) and Cisco Unified Contact Center Domain…
CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…
CVE-2021-1395 - CVSS 6.1 (medium), 2021-06-16: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a…
CVE-2021-1463 - CVSS 6.1 (medium), 2021-04-08: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct…
CVE-2019-1888 - CVSS 7.2 (high), 2020-09-23: A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to…
CVE-2020-3267 - CVSS 7.1 (high), 2020-06-03: A vulnerability in the API subsystem of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to change the…
CVE-2020-3280 - CVSS 9.8 (critical), 2020-05-22: A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker…
CVE-2020-3177 - CVSS 7.5 (high), 2020-04-15: A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and Cisco Unified Communications Manager…
CVE-2019-15278 - CVSS 6.1 (medium), 2020-01-26: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access…
CVE-2019-15259 - CVSS 6.1 (medium), 2019-10-02: A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting…
CVE-2019-12633 - CVSS 7.5 (high), 2019-09-05: A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a…
CVE-2019-12626 - CVSS 4.8 (medium), 2019-08-21: A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to…
CVE-2018-0403 - CVSS 9.8 (critical), 2018-07-18: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote…
CVE-2018-0402 - CVSS 8.8 (high), 2018-07-18: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote…
CVE-2018-0401 - CVSS 6.1 (medium), 2018-07-18: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote…
CVE-2018-0400 - CVSS 6.1 (medium), 2018-07-18: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote…
CVE-2017-6779 - CVSS 7.5 (high), 2018-06-07: Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow…
CVE-2017-12337 - CVSS 9.8 (critical), 2017-11-16: A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an…
CVE-2017-6722 - CVSS 6.1 (medium), 2017-07-04: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an…
CVE-2016-6427 - CVSS 8.8 (high), 2016-10-06: Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express…
CVE-2016-6425 - CVSS 6.1 (medium), 2016-10-06: Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1)…
CVE-2016-6426 - CVSS 7.5 (high), 2016-10-05: The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1)…
CVE-2016-1298 - CVSS 6.1 (medium), 2016-01-26: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to…
CVE-2011-2583 - CVSS 5 (medium), 2012-05-02: Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an…
CVE-2010-1570 - CVSS 7.8 (high), 2010-06-10: The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before…
CVE-2010-1571 - CVSS 7.8 (high), 2010-06-10: Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0…