CVE-2026-20116

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20116", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.376Z", "datePublished": "2026-03-11T16:31:23.070Z", "dateUpdated": "2026-03-11T17:20:21.361Z"}, "containers": {"cna": {"title": "Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of  Cisco Finesse, Cisco Packaged Contact Center Enterprise (Packaged CCE), Cisco Unified Contact Center Enterprise (Unified CCE), Cisco Unified Contact Center Express (Unified CCX), and Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface.\r\n\r\nThis vulnerability exists because the web-based management interface of an affected system does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-xss-MrNAH5Jh", "name": "cisco-sa-cc-xss-MrNAH5Jh"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-cc-xss-MrNAH5Jh", "discovery": "EXTERNAL", "defects": ["CSCwq36593"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "type": "cwe", "cweId": "CWE-79"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Unified Contact Center Express", "versions": [{"version": "10.5(1)SU1", "status": "affected"}, {"version": "10.6(1)", "status": "affected"}, {"version": "11.6(1)", "status": "affected"}, {"version": "10.6(1)SU1", "status": "affected"}, {"version": "10.6(1)SU3", "status": "affected"}, {"version": "11.6(2)", "status": "affected"}, {"version": "12.0(1)", "status": "affected"}, {"version": "11.0(1)SU1", "status": "affected"}, {"version": "11.5(1)SU1", "status": "affected"}, {"version": "10.5(1)", "status": "affected"}, {"version": "12.5(1)", "status": "affected"}, {"version": "12.5(1)SU1", "status": "affected"}, {"version": "12.5(1)SU2", "status": "affected"}, {"version": "12.5(1)SU3", "status": "affected"}, {"version": "12.5(1)_SU03_ES01", "status": "affected"}, {"version": "12.5(1)_SU03_ES02", "status": "affected"}, {"version": "12.5(1)_SU02_ES03", "status": "affected"}, {"version": "12.5(1)_SU02_ES04", "status": "affected"}, {"version": "12.5(1)_SU02_ES02", "status": "affected"}, {"version": "12.5(1)_SU01_ES02", "status": "affected"}, {"version": "12.5(1)_SU01_ES03", "status": "affected"}, {"version": "12.5(1)_SU02_ES01", "status": "affected"}, {"version": "11.6(2)ES07", "status": "affected"}, {"version": "11.6(2)ES08", "status": "affected"}, {"version": "12.5(1)_SU01_ES01", "status": "affected"}, {"version": "12.0(1)ES04", "status": "affected"}, {"version": "12.5(1)ES02", "status": "affected"}, {"version": "12.5(1)ES03", "status": "affected"}, {"version": "11.6(2)ES06", "status": "affected"}, {"version": "12.5(1)ES01", "status": "affected"}, {"version": "12.0(1)ES03", "status": "affected"}, {"version": "12.0(1)ES01", "status": "affected"}, {"version": "11.6(2)ES05", "status": "affected"}, {"version": "12.0(1)ES02", "status": "affected"}, {"version": "11.6(2)ES04", "status": "affected"}, {"version": "11.6(2)ES03", "status": "affected"}, {"version": "11.6(2)ES02", "status": "affected"}, {"version": "11.6(2)ES01", "status": "affected"}, {"version": "10.6(1)SU3ES03", "status": "affected"}, {"version": "11.0(1)SU1ES03", "status": "affected"}, {"version": "10.6(1)SU3ES01", "status": "affected"}, {"version": "10.5(1)SU1ES10", "status": "affected"}, {"version": "11.5(1)SU1ES03", "status": "affected"}, {"version": "11.6(1)ES02", "status": "affected"}, {"version": "11.5(1)ES01", "status": "affected"}, {"version": "10.6(1)SU2", "status": "affected"}, {"version": "10.6(1)SU2ES04", "status": "affected"}, {"version": "11.6(1)ES01", "status": "affected"}, {"version": "10.6(1)SU3ES02", "status": "affected"}, {"version": "11.5(1)SU1ES02", "status": "affected"}, {"version": "11.5(1)SU1ES01", "status": "affected"}, {"version": "11.0(1)SU1ES02", "status": "affected"}, {"version": "12.5(1)_SU03_ES03", "status": "affected"}, {"version": "12.5(1)_SU03_ES04", "status": "affected"}, {"version": "12.5(1)_SU03_ES05", "status": "affected"}, {"version": "UCCX 15.0.1", "status": "affected"}, {"version": "12.5(1)_SU03_ES06", "status": "affected"}, {"version": "12.5(1)_SU03_ES07", "status": "affected"}, {"version": "15.0(1)", "status": "affected"}, {"version": "15.0(1)ES01", "status": "affected"}, {"version": "15.0(1)ES-MSOauth", "status": "affected"}, {"version": "1501_ES01_CSCws06843", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-03-11T16:31:23.070Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20116", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-11T17:05:00.232053Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-11T17:20:21.361Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20116", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-11T17:05:00.232053Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-11T17:14:21.279Z"}}], "cna": {"title": "Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities", "source": {"defects": ["CSCwq36593"], "advisory": "cisco-sa-cc-xss-MrNAH5Jh", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Unified Contact Center Express", "versions": [{"status": "affected", "version": "10.5(1)SU1"}, {"status": "affected", "version": "10.6(1)"}, {"status": "affected", "version": "11.6(1)"}, {"status": "affected", "version": "10.6(1)SU1"}, {"status": "affected", "version": "10.6(1)SU3"}, {"status": "affected", "version": "11.6(2)"}, {"status": "affected", "version": "12.0(1)"}, {"status": "affected", "version": "11.0(1)SU1"}, {"status": "affected", "version": "11.5(1)SU1"}, {"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "12.5(1)SU1"}, {"status": "affected", "version": "12.5(1)SU2"}, {"status": "affected", "version": "12.5(1)SU3"}, {"status": "affected", "version": "12.5(1)_SU03_ES01"}, {"status": "affected", "version": "12.5(1)_SU03_ES02"}, {"status": "affected", "version": "12.5(1)_SU02_ES03"}, {"status": "affected", "version": "12.5(1)_SU02_ES04"}, {"status": "affected", "version": "12.5(1)_SU02_ES02"}, {"status": "affected", "version": "12.5(1)_SU01_ES02"}, {"status": "affected", "version": "12.5(1)_SU01_ES03"}, {"status": "affected", "version": "12.5(1)_SU02_ES01"}, {"status": "affected", "version": "11.6(2)ES07"}, {"status": "affected", "version": "11.6(2)ES08"}, {"status": "affected", "version": "12.5(1)_SU01_ES01"}, {"status": "affected", "version": "12.0(1)ES04"}, {"status": "affected", "version": "12.5(1)ES02"}, {"status": "affected", "version": "12.5(1)ES03"}, {"status": "affected", "version": "11.6(2)ES06"}, {"status": "affected", "version": "12.5(1)ES01"}, {"status": "affected", "version": "12.0(1)ES03"}, {"status": "affected", "version": "12.0(1)ES01"}, {"status": "affected", "version": "11.6(2)ES05"}, {"status": "affected", "version": "12.0(1)ES02"}, {"status": "affected", "version": "11.6(2)ES04"}, {"status": "affected", "version": "11.6(2)ES03"}, {"status": "affected", "version": "11.6(2)ES02"}, {"status": "affected", "version": "11.6(2)ES01"}, {"status": "affected", "version": "10.6(1)SU3ES03"}, {"status": "affected", "version": "11.0(1)SU1ES03"}, {"status": "affected", "version": "10.6(1)SU3ES01"}, {"status": "affected", "version": "10.5(1)SU1ES10"}, {"status": "affected", "version": "11.5(1)SU1ES03"}, {"status": "affected", "version": "11.6(1)ES02"}, {"status": "affected", "version": "11.5(1)ES01"}, {"status": "affected", "version": "10.6(1)SU2"}, {"status": "affected", "version": "10.6(1)SU2ES04"}, {"status": "affected", "version": "11.6(1)ES01"}, {"status": "affected", "version": "10.6(1)SU3ES02"}, {"status": "affected", "version": "11.5(1)SU1ES02"}, {"status": "affected", "version": "11.5(1)SU1ES01"}, {"status": "affected", "version": "11.0(1)SU1ES02"}, {"status": "affected", "version": "12.5(1)_SU03_ES03"}, {"status": "affected", "version": "12.5(1)_SU03_ES04"}, {"status": "affected", "version": "12.5(1)_SU03_ES05"}, {"status": "affected", "version": "UCCX 15.0.1"}, {"status": "affected", "version": "12.5(1)_SU03_ES06"}, {"status": "affected", "version": "12.5(1)_SU03_ES07"}, {"status": "affected", "version": "15.0(1)"}, {"status": "affected", "version": "15.0(1)ES01"}, {"status": "affected", "version": "15.0(1)ES-MSOauth"}, {"status": "affected", "version": "1501_ES01_CSCws06843"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-xss-MrNAH5Jh", "name": "cisco-sa-cc-xss-MrNAH5Jh"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of  Cisco Finesse, Cisco Packaged Contact Center Enterprise (Packaged CCE), Cisco Unified Contact Center Enterprise (Unified CCE), Cisco Unified Contact Center Express (Unified CCX), and Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface.\r\n\r\nThis vulnerability exists because the web-based management interface of an affected system does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-79", "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-03-11T16:31:23.070Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20116", "state": "PUBLISHED", "dateUpdated": "2026-03-11T17:20:21.361Z", "dateReserved": "2025-10-08T11:59:15.376Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-03-11T16:31:23.070Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Cisco Unified Contact Center Express", "vendor": "Cisco", "versions": [{"status": "affected", "version": "10.5(1)SU1"}, {"status": "affected", "version": "10.6(1)"}, {"status": "affected", "version": "11.6(1)"}, {"status": "affected", "version": "10.6(1)SU1"}, {"status": "affected", "version": "10.6(1)SU3"}, {"status": "affected", "version": "11.6(2)"}, {"status": "affected", "version": "12.0(1)"}, {"status": "affected", "version": "11.0(1)SU1"}, {"status": "affected", "version": "11.5(1)SU1"}, {"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "12.5(1)SU1"}, {"status": "affected", "version": "12.5(1)SU2"}, {"status": "affected", "version": "12.5(1)SU3"}, {"status": "affected", "version": "12.5(1)_SU03_ES01"}, {"status": "affected", "version": "12.5(1)_SU03_ES02"}, {"status": "affected", "version": "12.5(1)_SU02_ES03"}, {"status": "affected", "version": "12.5(1)_SU02_ES04"}, {"status": "affected", "version": "12.5(1)_SU02_ES02"}, {"status": "affected", "version": "12.5(1)_SU01_ES02"}, {"status": "affected", "version": "12.5(1)_SU01_ES03"}, {"status": "affected", "version": "12.5(1)_SU02_ES01"}, {"status": "affected", "version": "11.6(2)ES07"}, {"status": "affected", "version": "11.6(2)ES08"}, {"status": "affected", "version": "12.5(1)_SU01_ES01"}, {"status": "affected", "version": "12.0(1)ES04"}, {"status": "affected", "version": "12.5(1)ES02"}, {"status": "affected", "version": "12.5(1)ES03"}, {"status": "affected", "version": "11.6(2)ES06"}, {"status": "affected", "version": "12.5(1)ES01"}, {"status": "affected", "version": "12.0(1)ES03"}, {"status": "affected", "version": "12.0(1)ES01"}, {"status": "affected", "version": "11.6(2)ES05"}, {"status": "affected", "version": "12.0(1)ES02"}, {"status": "affected", "version": "11.6(2)ES04"}, {"status": "affected", "version": "11.6(2)ES03"}, {"status": "affected", "version": "11.6(2)ES02"}, {"status": "affected", "version": "11.6(2)ES01"}, {"status": "affected", "version": "10.6(1)SU3ES03"}, {"status": "affected", "version": "11.0(1)SU1ES03"}, {"status": "affected", "version": "10.6(1)SU3ES01"}, {"status": "affected", "version": "10.5(1)SU1ES10"}, {"status": "affected", "version": "11.5(1)SU1ES03"}, {"status": "affected", "version": "11.6(1)ES02"}, {"status": "affected", "version": "11.5(1)ES01"}, {"status": "affected", "version": "10.6(1)SU2"}, {"status": "affected", "version": "10.6(1)SU2ES04"}, {"status": "affected", "version": "11.6(1)ES01"}, {"status": "affected", "version": "10.6(1)SU3ES02"}, {"status": "affected", "version": "11.5(1)SU1ES02"}, {"status": "affected", "version": "11.5(1)SU1ES01"}, {"status": "affected", "version": "11.0(1)SU1ES02"}, {"status": "affected", "version": "12.5(1)_SU03_ES03"}, {"status": "affected", "version": "12.5(1)_SU03_ES04"}, {"status": "affected", "version": "12.5(1)_SU03_ES05"}, {"status": "affected", "version": "UCCX 15.0.1"}, {"status": "affected", "version": "12.5(1)_SU03_ES06"}, {"status": "affected", "version": "12.5(1)_SU03_ES07"}, {"status": "affected", "version": "15.0(1)"}, {"status": "affected", "version": "15.0(1)ES01"}, {"status": "affected", "version": "15.0(1)ES-MSOauth"}, {"status": "affected", "version": "1501_ES01_CSCws06843"}]}], "source": "psirt@cisco.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of  Cisco Finesse, Cisco Packaged Contact Center Enterprise (Packaged CCE), Cisco Unified Contact Center Enterprise (Unified CCE), Cisco Unified Contact Center Express (Unified CCX), and Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface.\r\n\r\nThis vulnerability exists because the web-based management interface of an affected system does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de gesti\u00f3n basada en web de Cisco Finesse, Cisco Packaged Contact Center Enterprise (Packaged CCE), Cisco Unified Contact Center Enterprise (Unified CCE), Cisco Unified Contact Center Express (Unified CCX) y Cisco Unified Intelligence Center podr\u00eda permitir a un atacante remoto no autenticado realizar ataques de cross-site scripting (XSS) contra un usuario de la interfaz.\n\nEsta vulnerabilidad existe porque la interfaz de gesti\u00f3n basada en web de un sistema afectado no valida suficientemente la entrada proporcionada por el usuario. Un atacante podr\u00eda explotar esta vulnerabilidad inyectando c\u00f3digo malicioso en p\u00e1ginas espec\u00edficas de la interfaz. Un exploit exitoso podr\u00eda permitir al atacante ejecutar c\u00f3digo de script arbitrario en el contexto de la interfaz afectada o acceder a informaci\u00f3n sensible basada en el navegador."}], "id": "CVE-2026-20116", "lastModified": "2026-06-17T10:17:08.547", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20116", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-11T17:05:00.232053Z", "version": "2.0.3"}}]}, "published": "2026-03-11T17:16:55.730", "references": [{"source": "psirt@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-xss-MrNAH5Jh"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Undergoing Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.5(1)SU1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.6(1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.6(1)SU1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.6(1)SU3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.0(1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.0(1)SU1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.5(1)SU1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.5(1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)SU1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)SU2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)SU3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU03_ES01"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU03_ES02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU02_ES03"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU02_ES04"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU02_ES02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU01_ES02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU01_ES03"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU02_ES01"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(2)ES07"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(2)ES08"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU01_ES01"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.0(1)ES04"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)ES02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)ES03"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(2)ES06"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)ES01"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.0(1)ES03"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.0(1)ES01"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(2)ES05"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.0(1)ES02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(2)ES04"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(2)ES03"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(2)ES02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(2)ES01"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.6(1)SU3ES03"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.0(1)SU1ES03"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.6(1)SU3ES01"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.5(1)SU1ES10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.5(1)SU1ES03"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(1)ES02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.5(1)ES01"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.6(1)SU2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.6(1)SU2ES04"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.6(1)ES01"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.6(1)SU3ES02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.5(1)SU1ES02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.5(1)SU1ES01"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.0(1)SU1ES02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU03_ES03"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU03_ES04"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU03_ES05"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "UCCX 15.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU03_ES06"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "12.5(1)_SU03_ES07"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "15.0(1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "15.0(1)ES01"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "15.0(1)ES-MSOauth"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "1501_ES01_CSCws06843"}}], "enrichment": {"confidence": 92.0, "confidence_source": "matching", "scores": [{"score": 92.0, "source": "matching"}]}, "original": {"product": "Cisco Unified Contact Center Express", "source": "cna", "vendor": "Cisco"}, "product": "unified_contact_center_express", "vendor": "cisco"}], "analysis": {"en": {"generated_at": "2026-03-17T15:09:35.097201+00:00", "value": {"mitigation_remediation": ["Update your Cisco Contact Center products to the latest releases that contain the XSS fix, as detailed in the Cisco Security Advisory.", "Restrict access to the web\u2011based management interface by limiting it to trusted network segments or using VPN access only.", "Deploy a Web Application Firewall (WAF) or content filtering solution to block cross\u2011site scripting payloads and monitor for injection attempts."], "summary": {"action": "Patch Now", "impact": "Cross\u2011Site Scripting (XSS)"}, "threat_synthesis": {"affected_systems": "Affected products include Cisco Unified Contact Center Express, Cisco Unified Contact Center Enterprise, Cisco Packaged Contact Center Enterprise, Cisco Finesse, and Cisco Unified Intelligence Center. Specific vulnerable versions are not provided in the data.", "description_and_impact": "This vulnerability is a stored cross\u2011site scripting (XSS) flaw in the web\u2011based management interface of several Cisco Contact Center products. It allows an unauthenticated, remote attacker to inject and execute arbitrary script code within the context of the interface, potentially accessing sensitive browser\u2011based data. The weakness stems from insufficient input validation (CWE\u201179).", "risk_and_exploitability": "The CVSS v3.1 score is 6.1, indicating moderate severity. EPSS is less than 1%, indicating a low probability of exploitation at current time. The vulnerability is not listed in the CISA KEV catalog. Attackers must first reach the web interface, which is typically exposed through port 8443/443; authentication is not required, so anyone can inject the payload. The impact is limited to the affected user's browser session unless the attacker can move laterally to compromise the underlying system."}}}}, "created": "2026-03-12T09:57:50.020052+00:00", "updated": "2026-03-20T15:30:29.317363+00:00", "vendors": ["cisco", "cisco$PRODUCT$unified_contact_center_express"]}