Known vulnerabilities in Cisco Unified Contact Center Express (Unified CCX) 12.5(1)SU3

Vendor: Cisco Systems, Inc
Software: Cisco Unified Contact Center Express (Unified CCX)
Version: 12.5(1)SU3
Software CPE: cpe:2.3:a:cisco_systems:cisco_unified_contact_center_express_unified_ccx:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco Unified Contact Center Express (Unified CCX) version 12.5(1)SU3 Cisco Unified Contact Center Express (Unified CCX) 12.5(1)SU3 is affected by 2 vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113011 - Unrestricted Upload of File with Dangerous Type
CVE-2025-20274		 CWE-434 Medium
No
No
 - 17.07.2025 SB2025071715
#VU113010 - Server-Side Request Forgery (SSRF)
CVE-2025-20288		 CWE-918 Medium
No
No
 - 17.07.2025 SB2025071715