CVE-2025-20129: cisco cisco socialminer
Vulnerability summary
CVE-2025-20129 is a medium (CVSS 5.4) vulnerability in cisco cisco socialminer. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 26.3% of scored vulnerabilities.
Timeline
- 04-06-2025PublishedVulnerability first disclosed.
- 04-06-2025Last modifiedVulnerability information updated.
Description
A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to persuade users to disclose sensitive data. This vulnerability is due to improper sanitization of HTTP requests that are sent to the web-based chat interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the chat interface of a targeted user on a vulnerable server. A successful exploit could allow the attacker to redirect chat traffic to a server that is under their control, resulting in sensitive information being redirected to the attacker.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA4.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NDiffers
EPSS trend
Probability
0.34%
Chance of exploitation in the next 30 days
Percentile
26%
Versus all other CVEs
30-day change
0.00 pp
From 0.34% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco4 products
- cisco socialminer12.5(1)ES01 | 10.5(1) | 11.6(1) | 10.6(1) | 12.0(1)ES04 | 10.6(2) | 12.5(1) | 11.6(2) | 12.0(1) | 12.0(1)ES02 | 11.0(1) | 11.5(1) | 11.5(1)SU1 | 12.0(1)ES03 | 12.5(1)SU3 | 12.5(1)SU1 | 12.5(1)SU2
- cisco unified contact center express10.6(1) | 10.5(1)SU1 | 10.6(1)SU3 | 12.0(1) | 10.0(1)SU1 | 10.6(1)SU1 | 11.0(1)SU1 | 11.5(1)SU1 | 10.5(1) | 11.6(1) | 11.6(2) | 12.5(1) | 12.5(1)SU1 | 12.5(1)SU2 | 12.5(1)SU3 | 12.5(1)_SU03_ES01 | 12.5(1)_SU03_ES02 | 12.5(1)_SU02_ES03 | 12.5(1)_SU02_ES04 | 12.5(1)_SU02_ES02 | 12.5(1)_SU01_ES02 | 12.5(1)_SU01_ES03 | 12.5(1)_SU02_ES01 | 11.6(2)ES07 | 11.6(2)ES08 | 12.5(1)_SU01_ES01 | 12.0(1)ES04 | 12.5(1)ES02 | 12.5(1)ES03 | 11.6(2)ES06 | 12.5(1)ES01 | 12.0(1)ES03 | 12.0(1)ES01 | 11.6(2)ES05 | 12.0(1)ES02 | 11.6(2)ES04 | 11.6(2)ES03 | 11.6(2)ES02 | 11.6(2)ES01 | 10.6(1)SU3ES03 | 11.0(1)SU1ES03 | 10.6(1)SU3ES01 | 10.5(1)SU1ES10 | 10.0(1)SU1ES04 | 11.5(1)SU1ES03 | 11.6(1)ES02 | 11.5(1)ES01 | 9.0(2)SU3ES04 | 10.6(1)SU2 | 10.6(1)SU2ES04 | 11.6(1)ES01 | 10.6(1)SU3ES02 | 11.5(1)SU1ES02 | 11.5(1)SU1ES01 | 8.5(1) | 11.0(1)SU1ES02 | 12.5(1)_SU03_ES03 | 12.5(1)_SU03_ES04 | 12.5(1)_SU03_ES05 | 12.5(1)_SU03_ES06
- socialminer10.5\(1\) | 10.6\(1\) | 10.6\(2\) | 11.0\(1\) | 11.5\(1\) | 11.5\(1\)su1 | 11.6\(1\) | 11.6\(2\) | 12.0\(1\) | 12.0\(1\)es02 | 12.0\(1\)es03 | 12.0\(1\)es04 | 12.5\(1\) | 12.5\(1\)es01 | 12.5\(1\)su1 | 12.5\(1\)su2 | 12.5\(1\)su3
- unified_contact_center_express8.5\(1\) | 9.0\(2\)su3es04 | 10.0\(1\)su1 | 10.0\(1\)su1es04 | 10.5\(1\) | 10.5\(1\)su1 | 10.5\(1\)su1es10 | 10.6\(1\) | 10.6\(1\)su1 | 10.6\(1\)su2 | 10.6\(1\)su2es04 | 10.6\(1\)su3 | 10.6\(1\)su3es01 | 10.6\(1\)su3es02 | 10.6\(1\)su3es03 | 11.0\(1\)su1 | 11.0\(1\)su1es02 | 11.0\(1\)su1es03 | 11.5.1es01 | 11.5.1su1 | 11.5\(1\)su1es01 | 11.5\(1\)su1es02 | 11.5\(1\)su1es03 | 11.6\(1\) | 11.6\(1\)es01 | 11.6\(1\)es02 | 11.6\(2\) | 11.6\(2\)es01 | 11.6\(2\)es02 | 11.6\(2\)es03 | 11.6\(2\)es04 | 11.6\(2\)es05 | 11.6\(2\)es06 | 11.6\(2\)es07 | 11.6\(2\)es08 | 12.0.1 | 12.0\(1\)es01 | 12.0\(1\)es02 | 12.0\(1\)es03 | 12.0\(1\)es04 | 12.5.1 | 12.5\(1\)_su01_es01 | 12.5\(1\)_su01_es02 | 12.5\(1\)_su01_es03 | 12.5\(1\)_su02_es01 | 12.5\(1\)_su02_es02 | 12.5\(1\)_su02_es03 | 12.5\(1\)_su02_es04 | 12.5\(1\)_su03_es01 | 12.5\(1\)_su03_es02 | 12.5\(1\)_su03_es03 | 12.5\(1\)_su03_es04 | 12.5\(1\)_su03_es05 | 12.5\(1\)_su03_es06 | 12.5\(1\)es01 | 12.5\(1\)es02 | 12.5\(1\)es03 | 12.5\(1\)su1 | 12.5\(1\)su2 | 12.5\(1\)su3
1 vendor · 4 products
References
1 links- sec.cloudapps.cisco.com/security/…Vendor Advisory