CVE-2025-20114
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Summary
A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system.
This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker could exploit this vulnerability by submitting crafted API requests to an affected system to execute an insecure direct object reference attack. A successful exploit could allow the attacker to access specific data that is associated with different users on the affected system.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Unified Contact Center Express | 10.6(1) | affected |
| Cisco | Cisco Unified Contact Center Express | 10.5(1)SU1 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU3 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.0(1) | affected |
| Cisco | Cisco Unified Contact Center Express | 10.0(1)SU1 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU1 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.0(1)SU1 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.5(1)SU1 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.5(1) | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(1) | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2) | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1) | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)SU1 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)SU2 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)SU3 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU02_ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU02_ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU02_ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU01_ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU01_ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU02_ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES07 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES08 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU01_ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.0(1)ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES06 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.0(1)ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.0(1)ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES05 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.0(1)ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU3ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.0(1)SU1ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU3ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.5(1)SU1ES10 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.0(1)SU1ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.5(1)SU1ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(1)ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.5(1)ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 9.0(2)SU3ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU2 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU2ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(1)ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU3ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.5(1)SU1ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.5(1)SU1ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 8.5(1) | affected |
| Cisco | Cisco Unified Contact Center Express | 11.0(1)SU1ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES05 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES06 | affected |
| Cisco | Cisco Unified Intelligence Center | 11.6(1) | affected |
| Cisco | Cisco Unified Intelligence Center | 10.5(1) | affected |
| Cisco | Cisco Unified Intelligence Center | 11.0(1) | affected |
| Cisco | Cisco Unified Intelligence Center | 11.5(1) | affected |
| Cisco | Cisco Unified Intelligence Center | 12.0(1) | affected |
| Cisco | Cisco Unified Intelligence Center | 12.5(1) | affected |
| Cisco | Cisco Unified Intelligence Center | 11.0(2) | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6(1) | affected |
| Cisco | Cisco Unified Intelligence Center | 12.5(1)SU | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6(1)_ET | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6(1)_ES05_ET | affected |
| Cisco | Cisco Unified Intelligence Center | 11.0(3) | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6(2) | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6(2)_504_Issue_ET | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6.1_ExcelIssue_ET | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6(2)_Permalink_ET | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6.2_CSCwk19536_ET | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6.2_CSCwm96922_ET | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6.2_Amq_OOS_ET | affected |
| Cisco | Cisco Unified Intelligence Center | 12.5(2)ET_CSCwi79933 | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6(2)_ET | affected |
| Cisco | Cisco Unified Intelligence Center | 12.6.2_CSCwn48501_ET | affected |
Weaknesses
- CWE-639: Authorization Bypass Through User-Controlled Key
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.