Product by Cisco
Cisco Unified Intelligence Center
27 known vulnerabilities in Cisco Unified Intelligence Center (Cisco), 1 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 74 other products | 10.0 | |
| Critical | CVE-2017-12337 | Cisco Voice Operating System: Improper Authentication | 9.8 | |
| High | CVE-2017-6779 | Multiple Cisco Products: Resource Management Errors | 7.5 | |
| Medium | CVE-2017-12254 | Cisco Unified Intelligence Center: Cross-site Scripting | 6.1 | |
| High | CVE-2017-12253 | Cisco Unified Intelligence Center: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2017-12248 | Cisco Unified Intelligence Center: Cross-site Scripting | 6.1 | |
| High | CVE-2016-6426 | Cisco Unified Contact Center Express: security vulnerability | 7.5 | |
| Medium | CVE-2017-6789 | Cisco Unified Intelligence Center: Cross-site Scripting | 6.1 | |
| Medium | CVE-2019-1860 | Cisco Unified Intelligence Center Remote File Injection Vulnerability | 5.9 | |
| Medium | CVE-2019-1670 | Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability | 6.1 | |
| High | CVE-2016-6427 | Cisco Unified Contact Center Express: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2026-20327 | Cisco Unified Intelligence Center SQL Injection Vulnerability | 6.5 | |
| Medium | CVE-2016-6425 | Cisco Unified Contact Center Express: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2023-20061 | Cisco Unified Intelligence Center Vulnerabilities | 6.5 | |
| Medium | CVE-2021-1463 | Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability | 6.1 | |
| High | CVE-2025-20113 | Cisco Unified Intelligence Center Privilege Escalation Vulnerability | 7.1 | |
| High | CVE-2025-20274 | Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability | 6.3 | |
| Medium | CVE-2023-20062 | Cisco Unified Intelligence Center Vulnerabilities | 6.5 | |
| Medium | CVE-2021-1395 | Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability | 4.7 | |
| Medium | CVE-2025-20288 | Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerability | 5.8 | |
| Medium | CVE-2023-20058 | Cisco Unified Intelligence Center: Cross-site Scripting | 6.1 | |
| High | CVE-2019-1658 | Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability | 4.7 | |
| Medium | CVE-2025-20278 | Cisco Unified Communications Products Command Injection Vulnerability | 6.0 | |
| Not rated | CVE-2015-0740 | Cisco Unified Intelligence Center 12.6(2)ES04: Cross-Site Request Forgery (CSRF) | — | |
| Medium | CVE-2025-20114 | Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability | 4.3 |
News
- Cisco Unified Intelligence Center SQL Injection Vulnerabilitycisco-psirt,
- Cisco Advance Notification for Publication of August 19, 2026, Security Advisoriescisco-psirt
- SSA-397453 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUSsiemens-productcert
- SSA-714170 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000siemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert