4.3

CVE-2025-20114: cisco cisco unified contact center express

CVSS: 4.3v3.1MediumAnalyzed
Published 21-05-2025Last modified 26-02-2026
Open JSON

Vulnerability summary

CVE-2025-20114 is a medium (CVSS 4.3) vulnerability in cisco cisco unified contact center express. EPSS estimates a 0.35% chance of exploitation in the next 30 days, higher than 27% of scored vulnerabilities.

Overall risk
17/100
0100
Low · default modelHow is this calculated?
CVSS score
4.3/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.35%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 21-05-2025
    PublishedVulnerability first disclosed.
  2. 26-02-2026
    Last modifiedVulnerability information updated.

Description

A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker could exploit this vulnerability by submitting crafted API requests to an affected system to execute an insecure direct object reference attack. A successful exploit could allow the attacker to access specific data that is associated with different users on the affected system.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.35%

Chance of exploitation in the next 30 days

Percentile

27%

Versus all other CVEs

30-day change

0.00 pp

From 0.35% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.35%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco4 products
  • cisco unified contact center express10.6(1) | 10.5(1)SU1 | 10.6(1)SU3 | 12.0(1) | 10.0(1)SU1 | 10.6(1)SU1 | 11.0(1)SU1 | 11.5(1)SU1 | 10.5(1) | 11.6(1) | 11.6(2) | 12.5(1) | 12.5(1)SU1 | 12.5(1)SU2 | 12.5(1)SU3 | 12.5(1)_SU03_ES01 | 12.5(1)_SU03_ES02 | 12.5(1)_SU02_ES03 | 12.5(1)_SU02_ES04 | 12.5(1)_SU02_ES02 | 12.5(1)_SU01_ES02 | 12.5(1)_SU01_ES03 | 12.5(1)_SU02_ES01 | 11.6(2)ES07 | 11.6(2)ES08 | 12.5(1)_SU01_ES01 | 12.0(1)ES04 | 12.5(1)ES02 | 12.5(1)ES03 | 11.6(2)ES06 | 12.5(1)ES01 | 12.0(1)ES03 | 12.0(1)ES01 | 11.6(2)ES05 | 12.0(1)ES02 | 11.6(2)ES04 | 11.6(2)ES03 | 11.6(2)ES02 | 11.6(2)ES01 | 10.6(1)SU3ES03 | 11.0(1)SU1ES03 | 10.6(1)SU3ES01 | 10.5(1)SU1ES10 | 10.0(1)SU1ES04 | 11.5(1)SU1ES03 | 11.6(1)ES02 | 11.5(1)ES01 | 9.0(2)SU3ES04 | 10.6(1)SU2 | 10.6(1)SU2ES04 | 11.6(1)ES01 | 10.6(1)SU3ES02 | 11.5(1)SU1ES02 | 11.5(1)SU1ES01 | 8.5(1) | 11.0(1)SU1ES02 | 12.5(1)_SU03_ES03 | 12.5(1)_SU03_ES04 | 12.5(1)_SU03_ES05 | 12.5(1)_SU03_ES06
  • cisco unified intelligence center11.6(1) | 10.5(1) | 11.0(1) | 11.5(1) | 12.0(1) | 12.5(1) | 11.0(2) | 12.6(1) | 12.5(1)SU | 12.6(1)_ET | 12.6(1)_ES05_ET | 11.0(3) | 12.6(2) | 12.6(2)_504_Issue_ET | 12.6.1_ExcelIssue_ET | 12.6(2)_Permalink_ET | 12.6.2_CSCwk19536_ET | 12.6.2_CSCwm96922_ET | 12.6.2_Amq_OOS_ET | 12.5(2)ET_CSCwi79933 | 12.6(2)_ET | 12.6.2_CSCwn48501_ET
  • unified_contact_center_express8.5\(1\) | 9.0\(2\)su3es04 | 10.0\(1\)su1 | 10.0\(1\)su1es04 | 10.5\(1\) | 10.5\(1\)su1 | 10.5\(1\)su1es10 | 10.6\(1\) | 10.6\(1\)su1 | 10.6\(1\)su2 | 10.6\(1\)su2es04 | 10.6\(1\)su3 | 10.6\(1\)su3es01 | 10.6\(1\)su3es02 | 10.6\(1\)su3es03 | 11.0\(1\)su1 | 11.0\(1\)su1es02 | 11.0\(1\)su1es03 | 11.5.1es01 | 11.5.1su1 | 11.5\(1\)su1es01 | 11.5\(1\)su1es02 | 11.5\(1\)su1es03 | 11.6\(1\) | 11.6\(1\)es01 | 11.6\(1\)es02 | 11.6\(2\) | 11.6\(2\)es01 | 11.6\(2\)es02 | 11.6\(2\)es03 | 11.6\(2\)es04 | 11.6\(2\)es05 | 11.6\(2\)es06 | 11.6\(2\)es07 | 11.6\(2\)es08 | 12.0.1 | 12.0\(1\)es01 | 12.0\(1\)es02 | 12.0\(1\)es03 | 12.0\(1\)es04 | 12.5.1 | 12.5\(1\)_su01_es01 | 12.5\(1\)_su01_es02 | 12.5\(1\)_su01_es03 | 12.5\(1\)_su02_es01 | 12.5\(1\)_su02_es02 | 12.5\(1\)_su02_es03 | 12.5\(1\)_su02_es04 | 12.5\(1\)_su03_es01 | 12.5\(1\)_su03_es02 | 12.5\(1\)_su03_es03 | 12.5\(1\)_su03_es04 | 12.5\(1\)_su03_es05 | 12.5\(1\)_su03_es06 | 12.5\(1\)es01 | 12.5\(1\)es02 | 12.5\(1\)es03 | 12.5\(1\)su1 | 12.5\(1\)su2 | 12.5\(1\)su3
  • unified_intelligence_center10.5\(1\) | 11.0\(1\) | 11.0\(2\) | 11.0\(3\) | 11.5\(1\) | 11.6\(1\) | 12.0\(1\) | 12.5\(1\) | 12.5\(1\)su | 12.6\(1\) | 12.6\(1\)_es05_et | 12.6\(1\)_et | 12.6\(2\)

1 vendor · 4 products

References

1 links