CVE-2025-20377: Cisco Unified Intelligence Center API Information Disclosure Vulnerability

Description

A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system. This vulnerability is due to improper validation of requests to certain API endpoints. An attacker could exploit this vulnerability by sending a valid request to a specific API endpoint within the affected system. A successful exploit could allow a low-privileged user to view sensitive information on the affected system that should be restricted. To exploit this vulnerability, the attacker must have valid user credentials on the affected system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Packaged Contact Center Enterprise

Default version status: unknown

12.5(1)affected
11.0(1)affected
12.0(1)affected
11.0(2)affected
11.5(1)affected
10.5(1)affected
10.5(2)affected
11.6(2)affected
10.5(1)_ES7affected
11.6(1)affected
10.5(2)_ES8affected
12.6(1)affected
12.5(2)affected
12.6(2)affected
15.0(1)affected

Cisco Cisco Unified Contact Center Enterprise

Default version status: unknown

12.6(1)ES3affected
12.6(1)ES1affected
12.6(1)affected
12.6(1)ES2affected
12.6(1)SecurityPatchaffected
12.5(1)ES1affected
12.5(1)affected
12.6(1)ES4affected
11.0(1)affected
10.5(1)affected
12.0(1)affected
10.5affected
11.0affected
11.5affected
12.6(2)affected
12.6(2)ES1affected
12.6(2)ES2affected
15.0(1)affected
12.6(2)ES3affected
15.0(1)ET01affected
15.0(1)_SP1affected

Cisco Cisco Unified Contact Center Express

Default version status: unknown

10.5(1)SU1affected
10.6(1)affected
11.6(1)affected
10.6(1)SU1affected
10.6(1)SU3affected
11.6(2)affected
12.0(1)affected
11.0(1)SU1affected
11.5(1)SU1affected
10.5(1)affected
12.5(1)affected
12.5(1)SU1affected
12.5(1)SU2affected
12.5(1)SU3affected
12.5(1)_SU03_ES01affected
12.5(1)_SU03_ES02affected
12.5(1)_SU02_ES03affected
12.5(1)_SU02_ES04affected
12.5(1)_SU02_ES02affected
12.5(1)_SU01_ES02affected
12.5(1)_SU01_ES03affected
12.5(1)_SU02_ES01affected
11.6(2)ES07affected
11.6(2)ES08affected
12.5(1)_SU01_ES01affected
12.0(1)ES04affected
12.5(1)ES02affected
12.5(1)ES03affected
11.6(2)ES06affected
12.5(1)ES01affected
12.0(1)ES03affected
12.0(1)ES01affected
11.6(2)ES05affected
12.0(1)ES02affected
11.6(2)ES04affected
11.6(2)ES03affected
11.6(2)ES02affected
11.6(2)ES01affected
10.6(1)SU3ES03affected
11.0(1)SU1ES03affected
10.6(1)SU3ES01affected
10.5(1)SU1ES10affected
11.5(1)SU1ES03affected
11.6(1)ES02affected
11.5(1)ES01affected
10.6(1)SU2affected
10.6(1)SU2ES04affected
11.6(1)ES01affected
10.6(1)SU3ES02affected
11.5(1)SU1ES02affected
11.5(1)SU1ES01affected
11.0(1)SU1ES02affected
12.5(1)_SU03_ES03affected
12.5(1)_SU03_ES04affected
12.5(1)_SU03_ES05affected
UCCX 15.0.1affected
12.5(1)_SU03_ES06affected

Cisco Cisco Unified Intelligence Center

Default version status: unknown

11.6(1)affected
10.5(1)affected
11.0(1)affected
11.5(1)affected
12.0(1)affected
12.5(1)affected
11.0(2)affected
12.6(1)affected
12.5(1)SUaffected
12.6(1)_ETaffected
12.6(1)_ES05_ETaffected
11.0(3)affected
12.6(2)affected
12.6(2)_504_Issue_ETaffected
12.6.1_ExcelIssue_ETaffected
12.6(2)_Permalink_ETaffected
12.6.2_CSCwk19536_ETaffected
12.6.2_CSCwm96922_ETaffected
12.6.2_Amq_OOS_ETaffected
12.5(2)ET_CSCwi79933affected
12.6(2)_ETaffected
12.6.2_CSCwn48501_ETaffected
15.0(1)affected
12.6.2_CSCwp61293_ETaffected
12.6.2_CSCwp92614_ETaffected

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-mult-vuln-gK4TFXSn ↗