Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-20113

Cisco Unified Intelligence Center Privilege Escalation Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of user-supplied parameters in API or HTTP requests. An attacker could exploit this vulnerability by submitting a crafted API or HTTP request to an affected system. A successful exploit could allow the attacker to access, modify, or delete data beyond the sphere of their intended access level, including obtaining potentially sensitive information stored in the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Unified Contact Center Express

Default version status: unknown

  • 10.6(1)affected
  • 10.5(1)SU1affected
  • 10.6(1)SU3affected
  • 12.0(1)affected
  • 10.0(1)SU1affected
  • 10.6(1)SU1affected
  • 11.0(1)SU1affected
  • 11.5(1)SU1affected
  • 10.5(1)affected
  • 11.6(1)affected
  • 11.6(2)affected
  • 12.5(1)affected
  • 12.5(1)SU1affected
  • 12.5(1)SU2affected
  • 12.5(1)SU3affected
  • 12.5(1)_SU03_ES01affected
  • 12.5(1)_SU03_ES02affected
  • 12.5(1)_SU02_ES03affected
  • 12.5(1)_SU02_ES04affected
  • 12.5(1)_SU02_ES02affected
  • 12.5(1)_SU01_ES02affected
  • 12.5(1)_SU01_ES03affected
  • 12.5(1)_SU02_ES01affected
  • 11.6(2)ES07affected
  • 11.6(2)ES08affected
  • 12.5(1)_SU01_ES01affected
  • 12.0(1)ES04affected
  • 12.5(1)ES02affected
  • 12.5(1)ES03affected
  • 11.6(2)ES06affected
  • 12.5(1)ES01affected
  • 12.0(1)ES03affected
  • 12.0(1)ES01affected
  • 11.6(2)ES05affected
  • 12.0(1)ES02affected
  • 11.6(2)ES04affected
  • 11.6(2)ES03affected
  • 11.6(2)ES02affected
  • 11.6(2)ES01affected
  • 10.6(1)SU3ES03affected
  • 11.0(1)SU1ES03affected
  • 10.6(1)SU3ES01affected
  • 10.5(1)SU1ES10affected
  • 10.0(1)SU1ES04affected
  • 11.5(1)SU1ES03affected
  • 11.6(1)ES02affected
  • 11.5(1)ES01affected
  • 9.0(2)SU3ES04affected
  • 10.6(1)SU2affected
  • 10.6(1)SU2ES04affected
  • 11.6(1)ES01affected
  • 10.6(1)SU3ES02affected
  • 11.5(1)SU1ES02affected
  • 11.5(1)SU1ES01affected
  • 8.5(1)affected
  • 11.0(1)SU1ES02affected
  • 12.5(1)_SU03_ES03affected
  • 12.5(1)_SU03_ES04affected
  • 12.5(1)_SU03_ES05affected
  • 12.5(1)_SU03_ES06affected

Cisco Cisco Unified Intelligence Center

Default version status: unknown

  • 11.6(1)affected
  • 10.5(1)affected
  • 11.0(1)affected
  • 11.5(1)affected
  • 12.0(1)affected
  • 12.5(1)affected
  • 11.0(2)affected
  • 12.6(1)affected
  • 12.5(1)SUaffected
  • 12.6(1)_ETaffected
  • 12.6(1)_ES05_ETaffected
  • 11.0(3)affected
  • 12.6(2)affected
  • 12.6(2)_504_Issue_ETaffected
  • 12.6.1_ExcelIssue_ETaffected
  • 12.6(2)_Permalink_ETaffected
  • 12.6.2_CSCwk19536_ETaffected
  • 12.6.2_CSCwm96922_ETaffected
  • 12.5(2)ET_CSCwi79933affected
  • 12.6.2_CSCwn48501_ETaffected

References