5.8

CVE-2025-20288: cisco cisco unified contact center express Server-Side Request Forgery (SSRF)

CVSS: 5.8v3.1MediumAnalyzed
Published 16-07-2025Last modified 18-07-2025
Open JSON

Vulnerability summary

CVE-2025-20288 is a medium (CVSS 5.8) Server-Side Request Forgery (SSRF) vulnerability in cisco cisco unified contact center express. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 30.1% of scored vulnerabilities.

Overall risk
23/100
0100
Low · default modelHow is this calculated?
CVSS score
5.8/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.38%
0%100%
Low · +0.04 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 16-07-2025
    PublishedVulnerability first disclosed.
  2. 18-07-2025
    Last modifiedVulnerability information updated.

Description

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.38%

Chance of exploitation in the next 30 days

Percentile

30%

Versus all other CVEs

30-day change

+0.04 pp

From 0.34% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.38%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco4 products
  • cisco unified contact center express10.6(1) | 10.5(1)SU1 | 10.6(1)SU3 | 12.0(1) | 10.6(1)SU1 | 11.0(1)SU1 | 11.5(1)SU1 | 10.5(1) | 11.6(1) | 11.6(2) | 12.5(1) | 12.5(1)SU1 | 12.5(1)SU2 | 12.5(1)SU3 | 12.5(1)_SU03_ES01 | 12.5(1)_SU03_ES02 | 12.5(1)_SU02_ES03 | 12.5(1)_SU02_ES04 | 12.5(1)_SU02_ES02 | 12.5(1)_SU01_ES02 | 12.5(1)_SU01_ES03 | 12.5(1)_SU02_ES01 | 11.6(2)ES07 | 11.6(2)ES08 | 12.5(1)_SU01_ES01 | 12.0(1)ES04 | 12.5(1)ES02 | 12.5(1)ES03 | 11.6(2)ES06 | 12.5(1)ES01 | 12.0(1)ES03 | 12.0(1)ES01 | 11.6(2)ES05 | 12.0(1)ES02 | 11.6(2)ES04 | 11.6(2)ES03 | 11.6(2)ES02 | 11.6(2)ES01 | 10.6(1)SU3ES03 | 11.0(1)SU1ES03 | 10.6(1)SU3ES01 | 10.5(1)SU1ES10 | 11.5(1)SU1ES03 | 11.6(1)ES02 | 11.5(1)ES01 | 10.6(1)SU2 | 10.6(1)SU2ES04 | 11.6(1)ES01 | 10.6(1)SU3ES02 | 11.5(1)SU1ES02 | 11.5(1)SU1ES01 | 11.0(1)SU1ES02 | 12.5(1)_SU03_ES03 | 12.5(1)_SU03_ES04 | 12.5(1)_SU03_ES05 | 12.5(1)_SU03_ES06
  • cisco unified intelligence center11.6(1) | 10.5(1) | 11.0(1) | 11.5(1) | 12.0(1) | 12.5(1) | 11.0(2) | 12.6(1) | 12.5(1)SU | 12.6(1)_ET | 12.6(1)_ES05_ET | 11.0(3) | 12.6(2) | 12.6(2)_504_Issue_ET | 12.6.1_ExcelIssue_ET | 12.6(2)_Permalink_ET | 12.6.2_CSCwk19536_ET | 12.6.2_CSCwm96922_ET | 12.6.2_Amq_OOS_ET | 12.5(2)ET_CSCwi79933 | 12.6(2)_ET | 12.6.2_CSCwn48501_ET
  • unified_contact_center_express10.5\(1\) | 10.5\(1\)su1 | 10.5\(1\)su1es10 | 10.6\(1\) | 10.6\(1\)su1 | 10.6\(1\)su2 | 10.6\(1\)su2es04 | 10.6\(1\)su3 | 10.6\(1\)su3es01 | 10.6\(1\)su3es02 | 10.6\(1\)su3es03 | 11.0\(1\)su1 | 11.0\(1\)su1es02 | 11.0\(1\)su1es03 | 11.5.1es01 | 11.5.1su1 | 11.5\(1\)su1es01 | 11.5\(1\)su1es02 | 11.5\(1\)su1es03 | 11.6\(1\) | 11.6\(1\)es01 | 11.6\(1\)es02 | 11.6\(2\) | 11.6\(2\)es01 | 11.6\(2\)es02 | 11.6\(2\)es03 | 11.6\(2\)es04 | 11.6\(2\)es05 | 11.6\(2\)es06 | 11.6\(2\)es07 | 11.6\(2\)es08 | 12.0.1 | 12.0\(1\)es01 | 12.0\(1\)es02 | 12.0\(1\)es03 | 12.0\(1\)es04 | 12.5.1 | 12.5\(1\)_su01_es01 | 12.5\(1\)_su01_es02 | 12.5\(1\)_su01_es03 | 12.5\(1\)_su02_es01 | 12.5\(1\)_su02_es02 | 12.5\(1\)_su02_es03 | 12.5\(1\)_su02_es04 | 12.5\(1\)_su03_es01 | 12.5\(1\)_su03_es02 | 12.5\(1\)_su03_es03 | 12.5\(1\)_su03_es04 | 12.5\(1\)_su03_es05 | 12.5\(1\)_su03_es06 | 12.5\(1\)es01 | 12.5\(1\)es02 | 12.5\(1\)es03 | 12.5\(1\)su1 | 12.5\(1\)su2 | 12.5\(1\)su3
  • unified_intelligence_center10.5\(1\) | 11.0\(1\) | 11.0\(2\) | 11.0\(3\) | 11.5\(1\) | 11.6\(1\) | 12.0\(1\) | 12.5\(1\) | 12.5\(1\)su | 12.6\(1\) | 12.6\(1\)_es05_et | 12.6\(1\)_et | 12.6\(2\)

1 vendor · 4 products

References

1 links