Known vulnerabilities in Cisco Unified Intelligence Center

Vendor: Cisco Systems, Inc
Software: Cisco Unified Intelligence Center
Software CPE: cpe:2.3:a:cisco_systems:cisco_unified_intelligence_center:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 22
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Unified Intelligence Center Cisco Unified Intelligence Center is affected by 22 known vulnerabilities: 1 high, 8 medium, 13 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144382 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-20327		 CWE-89 Low
No
No
 12.6(2) ES08, 15.0(1) SU2 19.08.2026 SB20260819136
#VU118145 - Exposure of sensitive information to an unauthorized actor
CVE-2025-20377		 CWE-200 Medium
No
No
 15.0(01) ES202508 06.11.2025 SB2025110613
#VU113011 - Unrestricted Upload of File with Dangerous Type
CVE-2025-20274		 CWE-434 Medium
No
No
 12.5(1) SU ES05, 12.6(2) ES05 17.07.2025 SB2025071715
#VU113010 - Server-Side Request Forgery (SSRF)
CVE-2025-20288		 CWE-918 Medium
No
No
 12.5(1) SU ES05, 12.6(2) ES05 17.07.2025 SB2025071715
#VU110238 - Command injection
CVE-2025-20278		 CWE-77 Low
No
No
 12.6(2)ES04, 15.0(1) 06.06.2025 SB2025060643
#VU109651 - Privilege Chaining
CVE-2025-20112		 CWE-268 Low
No
No
 - 22.05.2025 SB2025052222
#VU109645 - Authorization Bypass Through User-Controlled Key
CVE-2025-20114		 CWE-639 Medium
No
No
 12.5(1)SU ES04, 12.6(2)ES04 22.05.2025 SB2025052220
#VU109644 - Client-Side Enforcement of Server-Side Security
CVE-2025-20113		 CWE-602 Medium
No
No
 12.5(1)SU ES04, 12.6(2)ES04 22.05.2025 SB2025052220
#VU86697 - Improper Access Control
CVE-2024-20325		 CWE-284 Medium
No
No
 12.5.1 SU ES03, 12.6.1 ES08, 12.6.2 ES02 21.02.2024 SB2024022144
#VU72694 - Server-Side Request Forgery (SSRF)
CVE-2023-20062		 CWE-918 Medium
No
No
 - 01.03.2023 SB2023030143
#VU72693 - Exposure of sensitive information to an unauthorized actor
CVE-2023-20061		 CWE-200 Low
No
No
 - 01.03.2023 SB2023030143
#VU71103 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20058		 CWE-79 Low
No
No
 12.5.1 ES02, 12.6.1 ES06 11.01.2023 SB2023011152
#VU54169 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1395		 CWE-79 Medium
No
No
 12.0.1 ES14, 12.5.1 ES7 16.06.2021 SB2021061617
#VU51968 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1463		 CWE-79 Low
No
No
 12.0.1 ES14, 12.5.1 ES7 07.04.2021 SB2021040726
#VU17430 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1670		 CWE-79 Low
No
No
 - 07.02.2019 SB2019020711
#VU17201 - Cross-Site Request Forgery (CSRF)
CVE-2019-1658		 CWE-352 Low
No
No
 - 24.01.2019 SB2019012416
#VU9387 - Improper Authentication
CVE-2017-12337		 CWE-287 High
No
No
 - 21.11.2017 SB2017112115
SB2017112116
SB2017112117
and 5 more
#VU8564 - Cross-Site Request Forgery (CSRF)
CVE-2017-12253		 CWE-352 Low
No
No
 - 21.09.2017 SB2017092108
#VU8563 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12254		 CWE-79 Low
No
No
 - 21.09.2017 SB2017092108
#VU8562 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12248		 CWE-79 Low
No
No
 - 20.09.2017 SB2017092108


Showing elements 1 - 20 out of 22