Known vulnerabilities in Cisco Unified Contact Center Enterprise

Vendor: Cisco Systems, Inc
Software: Cisco Unified Contact Center Enterprise
Software CPE: cpe:2.3:a:cisco_systems:cisco_unified_contact_center_enterprise:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Unified Contact Center Enterprise Cisco Unified Contact Center Enterprise is affected by 7 known vulnerabilities: 1 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121913 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20109		 CWE-79 Low
No
No
 15.0(1)ES202511 21.01.2026 SB2026012158
#VU121912 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20055		 CWE-79 Low
No
No
 15.0(1)ES202511 21.01.2026 SB2026012158
#VU109646 - Improper Access Control
CVE-2025-20242		 CWE-284 Medium
No
No
 - 22.05.2025 -
#VU85776 - Deserialization of Untrusted Data
CVE-2024-20253		 CWE-502 High
No
No
 - 24.01.2024 -
#VU79664 - Improper input validation
CVE-2023-20232		 CWE-20 Medium
No
No
 12.5.1 SU03 ES02 17.08.2023 SB2023081714
#VU54169 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1395		 CWE-79 Medium
No
No
 12.5.1 SU2 16.06.2021 SB2021061617
#VU25473 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3163		 CWE-362 Medium
No
No
 12.5.1 20.02.2020 SB2020022003