Product by Cisco
Cisco Unified Contact Center Express
26 known vulnerabilities in Cisco Unified Contact Center Express (Cisco), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-20253 | Cisco: Deserialization of Untrusted Data | 9.9 | |
| Critical | CVE-2025-20354 | Cisco Unified Contact Center Express Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2025-20358 | Cisco Unified Contact Center Express Editor Authentication Bypass Vulnerability | 9.4 | |
| Medium | CVE-2025-20374 | Cisco Unified Contact Center Express Arbitrary File Download Vulnerability | 4.9 | |
| High | CVE-2019-12633 | Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability | 5.3 | |
| Medium | CVE-2017-12288 | Cisco Unified Contact Center Express: Cross-site Scripting | 6.1 | |
| Medium | CVE-2017-6722 | Cisco Unified Contact Center Express: security vulnerability | 6.1 | |
| High | CVE-2025-20376 | Cisco Unified Contact Center Express Remote Code Execution Vulnerability | 6.5 | |
| High | CVE-2025-20113 | Cisco Unified Intelligence Center Privilege Escalation Vulnerability | 7.1 | |
| High | CVE-2025-20274 | Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability | 6.3 | |
| High | CVE-2025-20375 | Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability | 6.5 | |
| Medium | CVE-2019-12626 | Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability | 4.8 | |
| Medium | CVE-2025-20288 | Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerability | 5.8 | |
| Medium | CVE-2026-20117 | Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities | 6.1 | |
| Medium | CVE-2026-20116 | Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities | 6.1 | |
| Medium | CVE-2023-20058 | Cisco Unified Intelligence Center: Cross-site Scripting | 6.1 | |
| Medium | CVE-2023-20232 | Cisco Unified Contact Center Express: Improper Input Validation | 5.3 | |
| Medium | CVE-2025-20129 | Cisco Customer Collaboration Platform Information Disclosure Vulnerability | 4.3 | |
| High | CVE-2025-20276 | Cisco Unified Contact Center Express Remote Code Execution Vulnerability | 3.8 | |
| Medium | CVE-2025-20278 | Cisco Unified Communications Products Command Injection Vulnerability | 6.0 | |
| Medium | CVE-2025-20114 | Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability | 4.3 | |
| Medium | CVE-2025-20377 | Cisco Unified Intelligence Center API Information Disclosure Vulnerability | 4.3 | |
| High | CVE-2025-20275 | Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability | 5.3 | |
| Medium | CVE-2025-20279 | Cisco Unifed Contact Center Express Stored Cross-Site Scripting Vulnerability | 4.8 | |
| Medium | CVE-2025-20112 | Cisco Unified Communications Products Privilege Escalation Vulnerability | 5.1 |