CVEvulnerability
CVE-2025-20279
4.8 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to conduct a stored XSS attack on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials.
This vulnerability is due to improper sanitization of user input to the web-based management interface. An attacker could exploit this vulnerability by submitting a malicious script through the interface. A successful exploit could allow the attacker to conduct a stored XSS attack on the affected system.
Affected configurations
• cisco unified contact center express 8.5\(1\)
• cisco unified contact center express 9.0\(2\)su3es04
• cisco unified contact center express 10.0\(1\)su1
• cisco unified contact center express 10.0\(1\)su1es04
• cisco unified contact center express 10.5\(1\)
• cisco unified contact center express 10.5\(1\)su1
• cisco unified contact center express 10.5\(1\)su1es10
• cisco unified contact center express 10.6\(1\)
• cisco unified contact center express 10.6\(1\)su1
• cisco unified contact center express 10.6\(1\)su2
• cisco unified contact center express 10.6\(1\)su2es04
• cisco unified contact center express 10.6\(1\)su3
• cisco unified contact center express 10.6\(1\)su3es01
• cisco unified contact center express 10.6\(1\)su3es02
• cisco unified contact center express 10.6\(1\)su3es03
• cisco unified contact center express 11.0\(1\)su1
• cisco unified contact center express 11.0\(1\)su1es02
• cisco unified contact center express 11.0\(1\)su1es03
• cisco unified contact center express 11.5\(1\)es01
• cisco unified contact center express 11.5\(1\)su1
• cisco unified contact center express 11.5\(1\)su1es01
• cisco unified contact center express 11.5\(1\)su1es02
• cisco unified contact center express 11.5\(1\)su1es03
• cisco unified contact center express 11.6\(1\)
• cisco unified contact center express 11.6\(1\)es01
• cisco unified contact center express 11.6\(1\)es02
• cisco unified contact center express 11.6\(2\)
• cisco unified contact center express 11.6\(2\)es01
• cisco unified contact center express 11.6\(2\)es02
• cisco unified contact center express 11.6\(2\)es03
• cisco unified contact center express 11.6\(2\)es04
• cisco unified contact center express 11.6\(2\)es05
• cisco unified contact center express 11.6\(2\)es06
• cisco unified contact center express 11.6\(2\)es07
• cisco unified contact center express 11.6\(2\)es08
• cisco unified contact center express 12.0\(1\)
• cisco unified contact center express 12.0\(1\)es01
• cisco unified contact center express 12.0\(1\)es02
• cisco unified contact center express 12.0\(1\)es03
• cisco unified contact center express 12.0\(1\)es04
• cisco unified contact center express 12.5\(1\)
• cisco unified contact center express 12.5\(1\) su01 es01
• cisco unified contact center express 12.5\(1\) su01 es02
• cisco unified contact center express 12.5\(1\) su01 es03
• cisco unified contact center express 12.5\(1\) su02 es01
• cisco unified contact center express 12.5\(1\) su02 es02
• cisco unified contact center express 12.5\(1\) su02 es03
• cisco unified contact center express 12.5\(1\) su02 es04
• cisco unified contact center express 12.5\(1\) su03 es01
• cisco unified contact center express 12.5\(1\) su03 es02
• cisco unified contact center express 12.5\(1\) su03 es03
• cisco unified contact center express 12.5\(1\) su03 es04
• cisco unified contact center express 12.5\(1\) su03 es05
• cisco unified contact center express 12.5\(1\) su03 es06
• cisco unified contact center express 12.5\(1\)es01
• cisco unified contact center express 12.5\(1\)es02
• cisco unified contact center express 12.5\(1\)es03
• cisco unified contact center express 12.5\(1\)su1
• cisco unified contact center express 12.5\(1\)su2
• cisco unified contact center express 12.5\(1\)su3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness