What’s Vulnerable › Products

Cisco Unified Contact Center Express vulnerabilities

51 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 19 published in the last 12 months.

Check whether your Cisco Unified Contact Center Express version is affected

Exploited Cisco Unified Contact Center Express vulnerabilities

• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability

Latest Cisco Unified Contact Center Express vulnerabilities

• CVE-2026-20117 — Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities (CVSS 6.1)
• CVE-2026-20116 — Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities (CVSS 6.1)
• CVE-2025-20377 — Cisco Unified Intelligence Center API Information Disclosure Vulnerability (CVSS 4.3)
• CVE-2025-20376 — Cisco Unified Contact Center Express Remote Code Execution Vulnerability (CVSS 7.2)
• CVE-2025-20375 — Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability (CVSS 7.2)
• CVE-2025-20374 — Cisco Unified Contact Center Express Arbitrary File Download Vulnerability (CVSS 4.9)
• CVE-2025-20358 — Cisco Unified Contact Center Express Editor Authentication Bypass Vulnerability (CVSS 9.8)
• CVE-2025-20354 — Cisco Unified Contact Center Express Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2025-20288 — Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerability (CVSS 5.3)
• CVE-2025-20274 — Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability (CVSS 8.8)
• CVE-2025-20279 — Cisco Unifed Contact Center Express Stored Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2025-20278 — Cisco Unified Communications Products Command Injection Vulnerability (CVSS 6.7)
• CVE-2025-20277 — Cisco Unified Contact Center Express Path Traversal Vulnerability (CVSS 6.7)
• CVE-2025-20276 — Cisco Unified Contact Center Express Remote Code Execution Vulnerability (CVSS 7.2)
• CVE-2025-20275 — Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2025-20129 — Cisco Customer Collaboration Platform Information Disclosure Vulnerability (CVSS 5.4)
• CVE-2025-20114 — Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability (CVSS 4.3)
• CVE-2025-20113 — Cisco Unified Intelligence Center Privilege Escalation Vulnerability (CVSS 7.1)
• CVE-2025-20112 — Cisco Unified Communications Products Privilege Escalation Vulnerability (CVSS 5.1)
• CVE-2024-20253 — (CVSS 10.0)
• CVE-2023-20232 — (CVSS 5.3)
• CVE-2023-20096 — Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability (CVSS 5.4)
• CVE-2023-20062 — Cisco Unified Intelligence Center Vulnerabilities (CVSS 4.3)
• CVE-2023-20061 — Cisco Unified Intelligence Center Vulnerabilities (CVSS 6.5)
• CVE-2023-20058 — (CVSS 6.1)