Known vulnerabilities in Cisco Packaged Contact Center Enterprise
Vendor:
Cisco Systems, Inc
Software:
Cisco Packaged Contact Center Enterprise
Software CPE:
cpe:2.3:a:cisco_systems:cisco_packaged_contact_center_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU121913 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-20109 |
CWE-79 | Low | 15.0(1)ES202511 | 21.01.2026 |
SB2026012158 |
||
| #VU121912 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-20055 |
CWE-79 | Low | 15.0(1)ES202511 | 21.01.2026 |
SB2026012158 |
||
| #VU85776 - Deserialization of Untrusted Data CVE-2024-20253 |
CWE-502 | High | - | 24.01.2024 |
SB2024012480 |
||
| #VU54169 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-1395 |
CWE-79 | Medium | 12.5.1 SU2 | 16.06.2021 |
SB2021061617 |
||
| #VU14683 - Cross-Site Request Forgery (CSRF) CVE-2018-0445 |
CWE-352 | Low | 11.6.1 ES | 06.09.2018 |
SB2018090620 |
||
| #VU14682 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-0444 |
CWE-79 | Low | 11.6.1 ES | 05.09.2018 |
SB2018090620 |