CVE-2025-20277
- EPSS 0.02%
- Veröffentlicht 04.06.2025 16:18:12
- Zuletzt bearbeitet 22.07.2025 13:41:20
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative creden...
CVE-2025-20276
- EPSS 0.38%
- Veröffentlicht 04.06.2025 16:18:04
- Zuletzt bearbeitet 22.07.2025 13:40:15
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative crede...
CVE-2025-20275
- EPSS 0.47%
- Veröffentlicht 04.06.2025 16:18:03
- Zuletzt bearbeitet 22.07.2025 13:36:08
A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deseriali...
CVE-2025-20129
- EPSS 0.02%
- Veröffentlicht 04.06.2025 16:17:27
- Zuletzt bearbeitet 01.08.2025 15:08:03
A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to persuade users to disclose sensitive data. This vulnerability is due to ...
CVE-2025-20113
- EPSS 0.06%
- Veröffentlicht 21.05.2025 16:19:41
- Zuletzt bearbeitet 22.07.2025 14:41:12
A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side v...
CVE-2025-20114
- EPSS 0.05%
- Veröffentlicht 21.05.2025 16:19:33
- Zuletzt bearbeitet 22.07.2025 14:41:40
A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validation of user-s...
CVE-2025-20112
- EPSS 0.01%
- Veröffentlicht 21.05.2025 16:19:24
- Zuletzt bearbeitet 21.05.2025 20:24:58
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions tha...
CVE-2021-1395
- EPSS 0.32%
- Veröffentlicht 16.06.2021 18:15:07
- Zuletzt bearbeitet 31.07.2025 15:03:24
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists becau...