CVE-2025-20377: Cisco Packaged Contact Center Enterprise 12.5(1), 11.0(1), 12.0(1), 11.0(2), 11.5(1), 10.5(1), 10.5(2), 11.6(2)…

Affected technology

Cisco Packaged Contact Center Enterprise · 12.5(1), 11.0(1), 12.0(1), 11.0(2), 11.5(1), 10.5(1), 10.5(2), 11.6(2), 10.5(1)_ES7, 11.6(1), 10.5(2)_ES8, 12.6(1), 12.5(2), 12.6(2), 15.0(1)
Cisco

Cisco Unified Contact Center Enterprise · 12.6(1)ES3, 12.6(1)ES1, 12.6(1), 12.6(1)ES2, 12.6(1)SecurityPatch, 12.5(1)ES1, 12.5(1), 12.6(1)ES4, 11.0(1), 10.5(1), 12.0(1), 10.5, 11.0, 11.5, 12.6(2), 12.6(2)ES1, 12.6(2)ES2, 15.0(1), 12.6(2)ES3, 15.0(1)ET01, 15.0(1)_SP1
Cisco

Cisco Unified Contact Center Express · 10.5(1)SU1, 10.6(1), 11.6(1), 10.6(1)SU1, 10.6(1)SU3, 11.6(2), 12.0(1), 11.0(1)SU1, 11.5(1)SU1, 10.5(1), 12.5(1), 12.5(1)SU1, 12.5(1)SU2, 12.5(1)SU3, 12.5(1)_SU03_ES01, 12.5(1)_SU03_ES02, 12.5(1)_SU02_ES03, 12.5(1)_SU02_ES04, 12.5(1)_SU02_ES02, 12.5(1)_SU01_ES02, 12.5(1)_SU01_ES03, 12.5(1)_SU02_ES01, 11.6(2)ES07, 11.6(2)ES08, 12.5(1)_SU01_ES01, 12.0(1)ES04, 12.5(1)ES02, 12.5(1)ES03, 11.6(2)ES06, 12.5(1)ES01, 12.0(1)ES03, 12.0(1)ES01, 11.6(2)ES05, 12.0(1)ES02, 11.6(2)ES04, 11.6(2)ES03, 11.6(2)ES02, 11.6(2)ES01, 10.6(1)SU3ES03, 11.0(1)SU1ES03, 10.6(1)SU3ES01, 10.5(1)SU1ES10, 11.5(1)SU1ES03, 11.6(1)ES02, 11.5(1)ES01, 10.6(1)SU2, 10.6(1)SU2ES04, 11.6(1)ES01, 10.6(1)SU3ES02, 11.5(1)SU1ES02, 11.5(1)SU1ES01, 11.0(1)SU1ES02, 12.5(1)_SU03_ES03, 12.5(1)_SU03_ES04, 12.5(1)_SU03_ES05, UCCX 15.0.1, 12.5(1)_SU03_ES06
Cisco

Cisco Unified Intelligence Center · 11.6(1), 10.5(1), 11.0(1), 11.5(1), 12.0(1), 12.5(1), 11.0(2), 12.6(1), 12.5(1)SU, 12.6(1)_ET, 12.6(1)_ES05_ET, 11.0(3), 12.6(2), 12.6(2)_504_Issue_ET, 12.6.1_ExcelIssue_ET, 12.6(2)_Permalink_ET, 12.6.2_CSCwk19536_ET, 12.6.2_CSCwm96922_ET, 12.6.2_Amq_OOS_ET, 12.5(2)ET_CSCwi79933, 12.6(2)_ET, 12.6.2_CSCwn48501_ET, 15.0(1), 12.6.2_CSCwp61293_ET, 12.6.2_CSCwp92614_ET
Cisco

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated, remote attacker could obtain sensitive information from an affected system. Vendor/CNA’s CVSS 3.1 assessment (base score 4.3/10) rates confidentiality impact as low; integrity and availability impact as none.