Known vulnerabilities in Cisco Unified Contact Center Express 12.5(1)SU3

Vendor: Cisco Systems, Inc
Software: Cisco Unified Contact Center Express
Version: 12.5(1)SU3
Software CPE: cpe:2.3:a:cisco_systems:cisco_unified_contact_center_express:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco Unified Contact Center Express version 12.5(1)SU3 Cisco Unified Contact Center Express 12.5(1)SU3 is affected by 3 vulnerabilities: 1 high, 2 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109645 - Authorization Bypass Through User-Controlled Key
CVE-2025-20114		 CWE-639 Medium
No
No
 - 22.05.2025 SB2025052220
#VU109644 - Client-Side Enforcement of Server-Side Security
CVE-2025-20113		 CWE-602 Medium
No
No
 - 22.05.2025 SB2025052220
#VU85776 - Deserialization of Untrusted Data
CVE-2024-20253		 CWE-502 High
No
No
 - 24.01.2024 SB2024012480