CVE-2025-20114

A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker could exploit this vulnerability by submitting crafted API requests to an affected system to execute an insecure direct object reference attack. A successful exploit could allow the attacker to access specific data that is associated with different users on the affected system.

• cisco unified intelligence center 10.5\(1\) • cisco unified intelligence center 11.0\(1\) • cisco unified intelligence center 11.0\(2\) • cisco unified intelligence center 11.0\(3\) • cisco unified intelligence center 11.5\(1\) • cisco unified intelligence center 11.6\(1\) • cisco unified intelligence center 12.0\(1\) • cisco unified intelligence center 12.5\(1\) • cisco unified intelligence center 12.5\(1\)su • cisco unified intelligence center 12.6\(1\) • cisco unified intelligence center 12.6\(1\) es05 et • cisco unified intelligence center 12.6\(1\) et • cisco unified intelligence center 12.6\(2\) • cisco unified contact center express 8.5\(1\) • cisco unified contact center express 9.0\(2\)su3es04 • cisco unified contact center express 10.0\(1\)su1 • cisco unified contact center express 10.0\(1\)su1es04 • cisco unified contact center express 10.5\(1\) • cisco unified contact center express 10.5\(1\)su1 • cisco unified contact center express 10.5\(1\)su1es10 • cisco unified contact center express 10.6\(1\) • cisco unified contact center express 10.6\(1\)su1 • cisco unified contact center express 10.6\(1\)su2 • cisco unified contact center express 10.6\(1\)su2es04 • cisco unified contact center express 10.6\(1\)su3 • cisco unified contact center express 10.6\(1\)su3es01 • cisco unified contact center express 10.6\(1\)su3es02 • cisco unified contact center express 10.6\(1\)su3es03 • cisco unified contact center express 11.0\(1\)su1 • cisco unified contact center express 11.0\(1\)su1es02 • cisco unified contact center express 11.0\(1\)su1es03 • cisco unified contact center express 11.5\(1\)es01 • cisco unified contact center express 11.5\(1\)su1 • cisco unified contact center express 11.5\(1\)su1es01 • cisco unified contact center express 11.5\(1\)su1es02 • cisco unified contact center express 11.5\(1\)su1es03 • cisco unified contact center express 11.6\(1\) • cisco unified contact center express 11.6\(1\)es01 • cisco unified contact center express 11.6\(1\)es02 • cisco unified contact center express 11.6\(2\) • cisco unified contact center express 11.6\(2\)es01 • cisco unified contact center express 11.6\(2\)es02 • cisco unified contact center express 11.6\(2\)es03 • cisco unified contact center express 11.6\(2\)es04 • cisco unified contact center express 11.6\(2\)es05 • cisco unified contact center express 11.6\(2\)es06 • cisco unified contact center express 11.6\(2\)es07 • cisco unified contact center express 11.6\(2\)es08 • cisco unified contact center express 12.0\(1\) • cisco unified contact center express 12.0\(1\)es01 • cisco unified contact center express 12.0\(1\)es02 • cisco unified contact center express 12.0\(1\)es03 • cisco unified contact center express 12.0\(1\)es04 • cisco unified contact center express 12.5\(1\) • cisco unified contact center express 12.5\(1\) su01 es01 • cisco unified contact center express 12.5\(1\) su01 es02 • cisco unified contact center express 12.5\(1\) su01 es03 • cisco unified contact center express 12.5\(1\) su02 es01 • cisco unified contact center express 12.5\(1\) su02 es02 • cisco unified contact center express 12.5\(1\) su02 es03 … and 13 more