Unified Intelligence Center (Cisco) - vulnerabilities (CVEs)

26 CVEs, 0 in the last 30 days, 47 known versions, newest CVE from 2025-07-16. Vendor: Cisco.

CVEs of Unified Intelligence Center

• CVE-2025-20288 - CVSS 5.8 (medium), 2025-07-16: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a…
• CVE-2025-20274 - CVSS 8.8 (high), 2025-07-16: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary…
• CVE-2025-20278 - CVSS 6.7 (medium), 2025-06-04: A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the…
• CVE-2025-20114 - CVSS 4.3 (medium), 2025-05-21: A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation…
• CVE-2025-20113 - CVSS 7.1 (high), 2025-05-21: A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of…
• CVE-2024-20325 - CVSS 7.1 (high), 2024-02-21: A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a…
• CVE-2023-20062 - CVSS 6.5 (medium), 2023-03-03: Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a…
• CVE-2023-20061 - CVSS 6.5 (medium), 2023-03-03: Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a…
• CVE-2023-20058 - CVSS 6.1 (medium), 2023-01-20: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a…
• CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…
• CVE-2021-1395 - CVSS 6.1 (medium), 2021-06-16: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a…
• CVE-2021-1463 - CVSS 6.1 (medium), 2021-04-08: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct…
• CVE-2019-1860 - CVSS 5.9 (medium), 2019-05-16: A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate…
• CVE-2019-1670 - CVSS 6.1 (medium), 2019-02-07: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct…
• CVE-2019-1658 - CVSS 7.4 (high), 2019-01-24: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a…
• CVE-2017-6779 - CVSS 7.5 (high), 2018-06-07: Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow…
• CVE-2017-12337 - CVSS 9.8 (critical), 2017-11-16: A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an…
• CVE-2017-12248 - CVSS 6.1 (medium), 2017-09-21: A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a…
• CVE-2017-12254 - CVSS 6.1 (medium), 2017-09-21: A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a Document Object Model…
• CVE-2017-12253 - CVSS 8.8 (high), 2017-09-21: A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due…
• CVE-2017-6789 - CVSS 6.1 (medium), 2017-09-07: A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker to impact the integrity of the system…
• CVE-2016-6427 - CVSS 8.8 (high), 2016-10-06: Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express…
• CVE-2016-6425 - CVSS 6.1 (medium), 2016-10-06: Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1)…
• CVE-2016-6426 - CVSS 7.5 (high), 2016-10-05: The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1)…
• CVE-2015-4274 - CVSS 6.8 (medium), 2015-07-16: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified Intelligence Center 10.0(1) and 10.6(1) allows remote attackers to…
• CVE-2015-0740 - CVSS 6.8 (medium), 2015-05-20: Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary…