CVE-2026-20109

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20109", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.374Z", "datePublished": "2026-01-21T16:26:19.268Z", "dateUpdated": "2026-01-21T16:46:11.154Z"}, "containers": {"cna": {"title": "Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "baseScore": 4.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}}], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. \r\n\r\nThese vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, the attacker must have valid administrative credentials."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD", "name": "cisco-sa-ucce-pcce-xss-2JVyg3uD"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-ucce-pcce-xss-2JVyg3uD", "discovery": "INTERNAL", "defects": ["CSCwr61043"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "type": "cwe", "cweId": "CWE-79"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Packaged Contact Center Enterprise", "versions": [{"version": "12.5(1)", "status": "affected"}, {"version": "11.0(1)", "status": "affected"}, {"version": "12.0(1)", "status": "affected"}, {"version": "11.0(2)", "status": "affected"}, {"version": "11.5(1)", "status": "affected"}, {"version": "10.5(1)", "status": "affected"}, {"version": "10.5(2)", "status": "affected"}, {"version": "11.6(2)", "status": "affected"}, {"version": "10.5(1)_ES7", "status": "affected"}, {"version": "11.6(1)", "status": "affected"}, {"version": "10.5(2)_ES8", "status": "affected"}, {"version": "12.6(1)", "status": "affected"}, {"version": "12.5(2)", "status": "affected"}, {"version": "12.6(2)", "status": "affected"}, {"version": "15.0(1)", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Unified Contact Center Enterprise", "versions": [{"version": "12.6(1)ES3", "status": "affected"}, {"version": "12.6(1)ES1", "status": "affected"}, {"version": "12.6(1)", "status": "affected"}, {"version": "12.6(1)ES2", "status": "affected"}, {"version": "12.6(1)SecurityPatch", "status": "affected"}, {"version": "12.5(1)ES1", "status": "affected"}, {"version": "12.5(1)", "status": "affected"}, {"version": "12.6(1)ES4", "status": "affected"}, {"version": "11.0(1)", "status": "affected"}, {"version": "10.5(1)", "status": "affected"}, {"version": "12.0(1)", "status": "affected"}, {"version": "10.5", "status": "affected"}, {"version": "11.0", "status": "affected"}, {"version": "11.5", "status": "affected"}, {"version": "12.6(2)", "status": "affected"}, {"version": "12.6(2)ES1", "status": "affected"}, {"version": "12.6(2)ES2", "status": "affected"}, {"version": "15.0(1)", "status": "affected"}, {"version": "12.6(2)ES3", "status": "affected"}, {"version": "15.0(1)ET01", "status": "affected"}, {"version": "15.0(1)_SP1", "status": "affected"}, {"version": "15.0(1)ES202508", "status": "affected"}, {"version": "12.6(2)_ES", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-01-21T16:26:19.268Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-21T16:45:34.998195Z", "id": "CVE-2026-20109", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-21T16:46:11.154Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20109", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-21T16:45:34.998195Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-21T16:45:42.982Z"}}], "cna": {"title": "Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability", "source": {"defects": ["CSCwr61043"], "advisory": "cisco-sa-ucce-pcce-xss-2JVyg3uD", "discovery": "INTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Packaged Contact Center Enterprise", "versions": [{"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "11.0(1)"}, {"status": "affected", "version": "12.0(1)"}, {"status": "affected", "version": "11.0(2)"}, {"status": "affected", "version": "11.5(1)"}, {"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "10.5(2)"}, {"status": "affected", "version": "11.6(2)"}, {"status": "affected", "version": "10.5(1)_ES7"}, {"status": "affected", "version": "11.6(1)"}, {"status": "affected", "version": "10.5(2)_ES8"}, {"status": "affected", "version": "12.6(1)"}, {"status": "affected", "version": "12.5(2)"}, {"status": "affected", "version": "12.6(2)"}, {"status": "affected", "version": "15.0(1)"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Unified Contact Center Enterprise", "versions": [{"status": "affected", "version": "12.6(1)ES3"}, {"status": "affected", "version": "12.6(1)ES1"}, {"status": "affected", "version": "12.6(1)"}, {"status": "affected", "version": "12.6(1)ES2"}, {"status": "affected", "version": "12.6(1)SecurityPatch"}, {"status": "affected", "version": "12.5(1)ES1"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "12.6(1)ES4"}, {"status": "affected", "version": "11.0(1)"}, {"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "12.0(1)"}, {"status": "affected", "version": "10.5"}, {"status": "affected", "version": "11.0"}, {"status": "affected", "version": "11.5"}, {"status": "affected", "version": "12.6(2)"}, {"status": "affected", "version": "12.6(2)ES1"}, {"status": "affected", "version": "12.6(2)ES2"}, {"status": "affected", "version": "15.0(1)"}, {"status": "affected", "version": "12.6(2)ES3"}, {"status": "affected", "version": "15.0(1)ET01"}, {"status": "affected", "version": "15.0(1)_SP1"}, {"status": "affected", "version": "15.0(1)ES202508"}, {"status": "affected", "version": "12.6(2)_ES"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD", "name": "cisco-sa-ucce-pcce-xss-2JVyg3uD"}], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. \r\n\r\nThese vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, the attacker must have valid administrative credentials."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-79", "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-01-21T16:26:19.268Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20109", "state": "PUBLISHED", "dateUpdated": "2026-01-21T16:46:11.154Z", "dateReserved": "2025-10-08T11:59:15.374Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-01-21T16:26:19.268Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Cisco Packaged Contact Center Enterprise", "vendor": "Cisco", "versions": [{"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "11.0(1)"}, {"status": "affected", "version": "12.0(1)"}, {"status": "affected", "version": "11.0(2)"}, {"status": "affected", "version": "11.5(1)"}, {"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "10.5(2)"}, {"status": "affected", "version": "11.6(2)"}, {"status": "affected", "version": "10.5(1)_ES7"}, {"status": "affected", "version": "11.6(1)"}, {"status": "affected", "version": "10.5(2)_ES8"}, {"status": "affected", "version": "12.6(1)"}, {"status": "affected", "version": "12.5(2)"}, {"status": "affected", "version": "12.6(2)"}, {"status": "affected", "version": "15.0(1)"}]}, {"defaultStatus": "unknown", "product": "Cisco Unified Contact Center Enterprise", "vendor": "Cisco", "versions": [{"status": "affected", "version": "12.6(1)ES3"}, {"status": "affected", "version": "12.6(1)ES1"}, {"status": "affected", "version": "12.6(1)"}, {"status": "affected", "version": "12.6(1)ES2"}, {"status": "affected", "version": "12.6(1)SecurityPatch"}, {"status": "affected", "version": "12.5(1)ES1"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "12.6(1)ES4"}, {"status": "affected", "version": "11.0(1)"}, {"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "12.0(1)"}, {"status": "affected", "version": "10.5"}, {"status": "affected", "version": "11.0"}, {"status": "affected", "version": "11.5"}, {"status": "affected", "version": "12.6(2)"}, {"status": "affected", "version": "12.6(2)ES1"}, {"status": "affected", "version": "12.6(2)ES2"}, {"status": "affected", "version": "15.0(1)"}, {"status": "affected", "version": "12.6(2)ES3"}, {"status": "affected", "version": "15.0(1)ET01"}, {"status": "affected", "version": "15.0(1)_SP1"}, {"status": "affected", "version": "15.0(1)ES202508"}, {"status": "affected", "version": "12.6(2)_ES"}]}], "source": "psirt@cisco.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. \r\n\r\nThese vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, the attacker must have valid administrative credentials."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades en la interfaz de gesti\u00f3n basada en web de Cisco Packaged Contact Center Enterprise (Packaged CCE) y Cisco Unified Contact Center Enterprise (Unified CCE) podr\u00edan permitir a un atacante remoto autenticado realizar un ataque de cross-site scripting (XSS) contra un usuario de la interfaz de gesti\u00f3n basada en web de un dispositivo afectado.\n\nEstas vulnerabilidades existen porque la interfaz de gesti\u00f3n basada en web no valida correctamente la entrada proporcionada por el usuario. Un atacante podr\u00eda explotar estas vulnerabilidades inyectando c\u00f3digo malicioso en p\u00e1ginas espec\u00edficas de la interfaz. Un exploit exitoso podr\u00eda permitir al atacante ejecutar c\u00f3digo de script arbitrario en el contexto de la interfaz afectada o acceder a informaci\u00f3n sensible basada en el navegador. Para explotar estas vulnerabilidades, el atacante debe tener credenciales administrativas v\u00e1lidas."}], "id": "CVE-2026-20109", "lastModified": "2026-06-17T10:17:07.370", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 2.7, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20109", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-21T16:45:34.998195Z", "version": "2.0.3"}}]}, "published": "2026-01-21T17:16:08.723", "references": [{"source": "psirt@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T04:13:57.224701+00:00", "value": {"mitigation_remediation": ["Apply the latest Cisco CCE patch or upgrade to a release that addresses the XSS vulnerability.", "Restrict administrative access to the web interface to trusted IP addresses or secure networks.", "Monitor web interface traffic for scripting attempts and enforce stricter input validation or sanitization."], "summary": {"action": "Apply patch", "impact": "Cross-site scripting in Cisco Unified Contact Center Enterprise web interface"}, "threat_synthesis": {"affected_systems": "Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise. No specific version information is provided, indicating that all product releases may be affected.", "description_and_impact": "Multiple vulnerabilities exist in the web-based management interface of Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise because the interface fails to validate user-supplied input. An authenticated, remote attacker with administrative credentials can inject malicious code into specific pages and execute arbitrary scripts in the context of the interface, or access sensitive browser-based information.", "risk_and_exploitability": "The CVSS score of 4.8 indicates low severity, while the EPSS score of less than 1% suggests a very low exploitation probability. The vulnerability is not listed in CISA's KEV catalog, further supporting its low likelihood of being actively exploited. An attacker must first obtain valid administrative credentials and then access the web management interface, making the primary attack vector a remote web-based management session with privileged accounts."}}}}, "created": "2026-01-22T10:15:19.611893+00:00", "updated": "2026-04-18T04:15:05.884363+00:00", "vendors": ["cisco", "cisco$PRODUCT$packaged_contact_center_enterprise", "cisco$PRODUCT$unified_contact_center_enterprise"]}