CVE-2025-20377
published 2025-11-05CVE-2025-20377: A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an…
PriorityP425medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.25%
16.2th percentile
A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system.
This vulnerability is due to improper validation of requests to certain API endpoints. An attacker could exploit this vulnerability by sending a valid request to a specific API endpoint within the affected system. A successful exploit could allow a low-privileged user to view sensitive information on the affected system that should be restricted. To exploit this vulnerability, the attacker must have valid user credentials on the affected system.
Affected
119 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_packaged_contact_center_enterprise | — | — |
| cisco | cisco_unified_contact_center_enterprise | — | — |
| cisco | cisco_unified_contact_center_enterprise | — | — |
| cisco | cisco_unified_contact_center_enterprise | — | — |
| cisco | cisco_unified_contact_center_enterprise | — | — |
| cisco | cisco_unified_contact_center_enterprise | — | — |
| cisco | cisco_unified_contact_center_enterprise | — | — |
| cisco | cisco_unified_contact_center_enterprise | — | — |
| cisco | cisco_unified_contact_center_enterprise | — | — |
| cisco | cisco_unified_contact_center_enterprise | — | — |
| cisco | cisco_unified_contact_center_enterprise | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
vendor_cisco6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Cisco Contact Center Products Vulnerabilities
vendor_cisco·2025-11-05·CVSS 6.5
CVE-2025-20374 [MEDIUM] CWE-200 Multiple Cisco Contact Center Products Vulnerabilities
Multiple Cisco Contact Center Products Vulnerabilities
Multiple vulnerabilities in Cisco Unified Contact Center Express (Unified CCX), Cisco Unified Contact Center Enterprise (Unified CCE), Cisco Packaged Contact Center Enterprise (Packaged CCE), and Cisco Unified Intelligence Center (CUIC) could allow an authenticated, remote attacker to disclose sensitive information, download arbitrary files, execute arbitrary commands, and elevate privileges to root. To exploit these vulnerabilities, the attacker must have valid credentials.
For more information about these vulnerabilities, see the Details section of this advisory.
This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-mult-vuln-gK4TFXSn
Cisco
Multiple Cisco Contact Center Products Vulnerabilities
vendor_cisco·CVSS 3.1
CVE-2025-20377 Multiple Cisco Contact Center Products Vulnerabilities
CVE-2025-20377: Multiple Cisco Contact Center Products Vulnerabilities
Multiple vulnerabilities in Cisco Unified Contact Center Express (Unified CCX), Cisco Unified Contact Center Enterprise (Unified CCE), Cisco Packaged Contact Center Enterprise (Packaged CCE), and Cisco Unified Intelligence Center (CUIC) could allow an authenticated, remote attacker to disclose sensitive information, download arbitrary files, execute arbitrary commands, and elevate privileges to root . To exploit these vulnerabilities, the attacker must have valid credentials. For more information about these vulnerabilities, see the
CVSS: 3.1
CWE: CWE-200, CWE-22, CWE-434, CWE-200, CWE-22, CWE-434
Bug IDs: CSCwq36567, CSCwq36596, CSCwq36645, CSCwq36567, CSCwq36596
GHSA
GHSA-46m8-44h2-g6m9: A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive informatio
ghsa_unreviewed·2025-11-05
CVE-2025-20377 [MEDIUM] CWE-200 GHSA-46m8-44h2-g6m9: A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive informatio
A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system.
This vulnerability is due to improper validation of requests to certain API endpoints. An attacker could exploit this vulnerability by sending a valid request to a specific API endpoint within the affected system. A successful exploit could allow a low-privileged user to view sensitive information on the affected system that should be restricted. To exploit this vulnerability, the attacker must have valid user credentials on the affected system.
No detection rules found.
No public exploits indexed.
2025-11-05
Published