Cisco Unified Contact Center Express
Cisco
- Product type
- Other
- Catalog vulnerabilities
- 36
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Severity across 36 analyzed records
Verify to analyze this security profile
As of 09/13/2026, within CyStack's analyzed data, Cisco Unified Contact Center Express has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Cisco Unified Contact Center Express and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-20117Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published03/11/2026 | SeverityMedium |
CVE-2026-20116Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published03/11/2026 | SeverityMedium |
CVE-2025-20377Cisco Unified Intelligence Center API Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/05/2025 | SeverityMedium |
CVE-2025-20375Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/05/2025 | SeverityMedium |
CVE-2025-20376Cisco Unified Contact Center Express Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/05/2025 | SeverityMedium |
CVE-2025-20374Cisco Unified Contact Center Express Arbitrary File Download Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/05/2025 | SeverityMedium |
CVE-2025-20358Cisco Unified Contact Center Express Editor Authentication Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/05/2025 | SeverityCritical |
CVE-2025-20354Cisco Unified Contact Center Express Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/05/2025 | SeverityCritical |
CVE-2025-20288Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/16/2025 | SeverityMedium |
CVE-2025-20274Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/16/2025 | SeverityMedium |
CVE-2025-20278Cisco Unified Communications Products Command Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/04/2025 | SeverityMedium |
CVE-2025-20279Cisco Unifed Contact Center Express Stored Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/04/2025 | SeverityMedium |
CVE-2025-20277Cisco Unified Contact Center Express Path Traversal Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/04/2025 | SeverityLow |
CVE-2025-20276Cisco Unified Contact Center Express Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/04/2025 | SeverityLow |
CVE-2025-20275Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/04/2025 | SeverityMedium |
CVE-2025-20129Cisco Customer Collaboration Platform Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/04/2025 | SeverityMedium |
CVE-2025-20113Cisco Unified Intelligence Center Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/21/2025 | SeverityHigh |
CVE-2025-20114Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/21/2025 | SeverityMedium |
CVE-2025-20112Cisco Unified Communications Products Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/21/2025 | SeverityMedium |
CVE-2024-20405 | Exploitation statusNot known exploited | FixNot confirmed | Published06/05/2024 | SeverityMedium |
CVE-2024-20404 | Exploitation statusNot known exploited | FixNot confirmed | Published06/05/2024 | SeverityHigh |
CVE-2024-20253 | Exploitation statusNot known exploited | FixNot confirmed | Published01/26/2024 | SeverityCritical |
CVE-2023-20232 | Exploitation statusNot confirmed | FixNot confirmed | Published08/16/2023 | SeverityMedium |
CVE-2023-20096Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/05/2023 | SeverityMedium |
CVE-2023-20058 | Exploitation statusNot known exploited | FixNot confirmed | Published01/19/2023 | SeverityMedium |
CVE-2021-1395Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/16/2021 | SeverityMedium |
CVE-2021-1358Cisco Finesse Open Redirect Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/22/2021 | SeverityMedium |
CVE-2021-1254Cisco Finesse Cross-Site Scripting Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/22/2021 | SeverityMedium |
CVE-2021-1463Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/08/2021 | SeverityMedium |
CVE-2019-1888Cisco Unified Contact Center Express Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/23/2020 | SeverityHigh |
CVE-2020-3267Cisco Unified Contact Center Express Improper API Authorization Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/03/2020 | SeverityMedium |
CVE-2020-3280Cisco Unified Contact Center Express Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/22/2020 | SeverityCritical |
CVE-2019-15259Cisco Unified Contact Center Express HTTP Response Splitting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/02/2019 | SeverityMedium |
CVE-2019-12633Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/05/2019 | SeverityMedium |
CVE-2019-12626Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/21/2019 | SeverityMedium |
CVE-2019-1670Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/07/2019 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
