Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2025-20288

Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Unified Contact Center Express

Default version status: unknown

  • 10.6(1)affected
  • 10.5(1)SU1affected
  • 10.6(1)SU3affected
  • 12.0(1)affected
  • 10.6(1)SU1affected
  • 11.0(1)SU1affected
  • 11.5(1)SU1affected
  • 10.5(1)affected
  • 11.6(1)affected
  • 11.6(2)affected
  • 12.5(1)affected
  • 12.5(1)SU1affected
  • 12.5(1)SU2affected
  • 12.5(1)SU3affected
  • 12.5(1)_SU03_ES01affected
  • 12.5(1)_SU03_ES02affected
  • 12.5(1)_SU02_ES03affected
  • 12.5(1)_SU02_ES04affected
  • 12.5(1)_SU02_ES02affected
  • 12.5(1)_SU01_ES02affected
  • 12.5(1)_SU01_ES03affected
  • 12.5(1)_SU02_ES01affected
  • 11.6(2)ES07affected
  • 11.6(2)ES08affected
  • 12.5(1)_SU01_ES01affected
  • 12.0(1)ES04affected
  • 12.5(1)ES02affected
  • 12.5(1)ES03affected
  • 11.6(2)ES06affected
  • 12.5(1)ES01affected
  • 12.0(1)ES03affected
  • 12.0(1)ES01affected
  • 11.6(2)ES05affected
  • 12.0(1)ES02affected
  • 11.6(2)ES04affected
  • 11.6(2)ES03affected
  • 11.6(2)ES02affected
  • 11.6(2)ES01affected
  • 10.6(1)SU3ES03affected
  • 11.0(1)SU1ES03affected
  • 10.6(1)SU3ES01affected
  • 10.5(1)SU1ES10affected
  • 11.5(1)SU1ES03affected
  • 11.6(1)ES02affected
  • 11.5(1)ES01affected
  • 10.6(1)SU2affected
  • 10.6(1)SU2ES04affected
  • 11.6(1)ES01affected
  • 10.6(1)SU3ES02affected
  • 11.5(1)SU1ES02affected
  • 11.5(1)SU1ES01affected
  • 11.0(1)SU1ES02affected
  • 12.5(1)_SU03_ES03affected
  • 12.5(1)_SU03_ES04affected
  • 12.5(1)_SU03_ES05affected
  • 12.5(1)_SU03_ES06affected

Cisco Cisco Unified Intelligence Center

Default version status: unknown

  • 11.6(1)affected
  • 10.5(1)affected
  • 11.0(1)affected
  • 11.5(1)affected
  • 12.0(1)affected
  • 12.5(1)affected
  • 11.0(2)affected
  • 12.6(1)affected
  • 12.5(1)SUaffected
  • 12.6(1)_ETaffected
  • 12.6(1)_ES05_ETaffected
  • 11.0(3)affected
  • 12.6(2)affected
  • 12.6(2)_504_Issue_ETaffected
  • 12.6.1_ExcelIssue_ETaffected
  • 12.6(2)_Permalink_ETaffected
  • 12.6.2_CSCwk19536_ETaffected
  • 12.6.2_CSCwm96922_ETaffected
  • 12.6.2_Amq_OOS_ETaffected
  • 12.5(2)ET_CSCwi79933affected
  • 12.6(2)_ETaffected
  • 12.6.2_CSCwn48501_ETaffected

References