A vulnerability in the web-based management interface of Cisco Unified Intelligent Contact Management Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.

This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00024.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Cisco Cisco Unified Intelligent Contact Management Enterprise unknown
Version Status Constraints
10.5(2)_ES15 affected —
10.5(1)_ES20 affected —
10.5(2)_ES17 affected —
10.5(1)_ES21 affected —
10.5(2)_ES40 affected —
10.5(2)_ES35 affected —
10.0(2)_ES22 affected —
10.5(2)_ES31 affected —
10.5(2)_ES39 affected —
10.0(2)_ES23 affected —
10.0(2)_ES28 affected —
11.0(2)_ES6 affected —
10.5(2)_ES24 affected —
10.5(2)_ES26 affected —
10.5(2)_ES18 affected —
11.0(2)_ES1 affected —
10.5(2)_ES27 affected —
10.0(2)_ES27 affected —
11.0(2)_ES7 affected —
10.0(2)_ES25 affected —
10.0(2)_ES24 affected —
10.0(2)_ES19 affected —
11.0(2)_ES2 affected —
10.5(1)_ES23 affected —
10.5(2)_ES16 affected —
10.5(1)_ES24 affected —
11.0(2)_ES3 affected —
10.5(2)_ES32 affected —
11.0(2)_ES4 affected —
10.5(2)_ES33 affected —
10.5(2)_ES30 affected —
10.0(2)_ES30 affected —
11.0(2) affected —
11.0(1)_ES4 affected —
10.0(2)_ES29 affected —
10.5(2)_ES36 affected —
11.0(2)_ES5 affected —
10.0(2)_ES31 affected —
10.5(2)_ES25 affected —
10.5(2)_ES23 affected —
10.5(2)_ES41 affected —
10.5(1)_ES26 affected —
11.0(1)_ES3 affected —
10.0(2)_ES17 affected —
10.0(2)_ES20 affected —
11.0(2)_ES8 affected —
10.5(2)_ES22 affected —
10.5(2)_ES34 affected —
10.5(2)_ES38 affected —
10.5(2)_ES37 affected —
10.0(2)_ES26 affected —
10.5(1)_ES2 affected —
10.5(1)_ES5 affected —
10.5(1)_ES6 affected —
10.5(1) affected —
10.0(1)_ES13 affected —
10.0(2) affected —
10.0(1)_ES9 affected —
10.0(1)_ES10 affected —
10.0(1)_ES12 affected —
10.5(1)_ES8 affected —
10.5(1)_ES12 affected —
10.5(1)_ES11 affected —
10.5(1)_ES14 affected —
10.0(2)_ES3 affected —
10.0(1)_ES15 affected —
10.5(2)_ES7 affected —
10.5(1)_ES10 affected —
10.0(2)_ES9 affected —
10.5(2)_ES3 affected —
10.5(2) affected —
10.0(2)_ES7 affected —
10.0(2)_ES8 affected —
10.0(2)_ES10 affected —
10.0(2)_ES2 affected —
10.0(1)_ES16 affected —
10.0(2)_ES6 affected —
10.5(2)_ES10 affected —
10.5(1)_ES16 affected —
10.5(1)_ES9 affected —
10.0(2)_ES14 affected —
10.5(2)_ES9 affected —
10.0(2)_ES11 affected —
10.5(2)_ES4 affected —
11.0(1) affected —
10.5(2)_ES13 affected —
10.5(1)_ES18 affected —
10.5(2)_ES6 affected —
10.0(2)_ES15 affected —
10.5(2)_ES5 affected —
10.0(2)_ES12 affected —
10.5(2)_ES14 affected —
10.5(2)_ES8 affected —
10.0(2)_ES5 affected —
12.6(1)_ES34 affected —
12.5(2) affected —
12.5(1)_ET125 affected —
12.5(1)_ES143 affected —
12.5(2)_ES19 affected —
12.5(2)_ES6 affected —
12.5(1)_ES118 affected —
12.0(1)_ES104 affected —
12.6(1)_ES41 affected —
12.5(1)_ES138 affected —
12.5(1)_ES119 affected —
12.6(1)_ES39 affected —
12.5(1)_ES135 affected —
12.5(2)_ES12 affected —
12.0(1)_ET105 affected —
12.6(1)_ES43 affected —
12.6(1)_ES45 affected —
12.5(2)_ES8 affected —
12.5(2)_ES15 affected —
12.5(1)_ET142 affected —
12.6(1)_ET52 affected —
11.6(2)_ES87 affected —
12.6(1)_ET33 affected —
12.5(1)_ET131 affected —
12.5(2)_ES2 affected —
12.5(2)_ES3 affected —
12.5(1)_ET133 affected —
12.5(1)_ES123 affected —
12.5(1)_ET134 affected —
12.6(1)_ES53 affected —
12.5(2)_ES18 affected —
12.5(1)_ES122 affected —
12.5(2)_ES5 affected —
12.5(1)_ES130 affected —
12.6(1)_ES40 affected —
12.5(2)_ES9 affected —
12.5(1)_ET141 affected —
12.6(1)_ES55 affected —
12.6(1)_ES56 affected —
12.0(1)_ET106 affected —
12.6(1)_ES35 affected —
12.5(1)_ES132 affected —
12.6(1)_ES38 affected —
12.5(1)_ES124 affected —
12.6(1)_ES37 affected —
12.6(1)_ES42 affected —
12.5(1)_ES136 affected —
12.6(1)_ET49 affected —
12.5(1)_ES140 affected —
12.5(1)_ET121 affected —
12.5(1)_ET120 affected —
12.5(1)_ES128 affected —
12.5(2)_ES17 affected —
12.6(1)_ES36 affected —
12.6(1)_ES57 affected —
12.0(1)_ET103 affected —
12.5(2)_ES7 affected —
12.5(2)_ES13 affected —
12.5(1)_ES137 affected —
12.5(2)_ES16 affected —
12.5(1)_ES139 affected —
12.6(1)_ES46 affected —
12.6(1)_ES54 affected —
12.5(1)_ES129 affected —
12.6(1)_ES50 affected —
12.6(1)_ES44 affected —
12.5(2)_ES10 affected —
12.5(2)_ES14 affected —
12.6(1)_ES47 affected —
12.5(1)_ES126 affected —
12.5(1)_ET127 affected —
12.5(2)_ES4 affected —
12.6(1)_ES48 affected —
12.6(1)_ET51 affected —
12.5(1)_ES105 affected —
12.5(1)_ES106 affected —
12.5(1)_ES88 affected —
11.6(2)_ES84 affected —
12.0(1)_ES94 affected —
12.5(1)_ES108 affected —
12.5(1)_ET116 affected —
12.0(1)_ES100 affected —
12.6(1)_ES16 affected —
12.6(1)_ET24 affected —
12.0(1)_ES95 affected —
12.5(1)_ES113 affected —
12.5(1)_ET95 affected —
12.0(1)_ES87 affected —
11.6(2)_ES81 affected —
12.6(1)_ES31 affected —
12.5(1)_ET92 affected —
12.0(1)_ES88 affected —
12.6(1)_ES19 affected —
12.0(1)_ES85 affected —
12.6(1)_ES25 affected —
12.0(1)_ET84 affected —
12.6(1)_ES18 affected —
12.6(1)_ES20 affected —
12.0(1)_ES93 affected —
12.0(1)_ES102 affected —
12.5(1)_ES117 affected —
12.5(1)_ES94 affected —
12.5(1)_ES107 affected —
12.5(1)_ES111 affected —
12.5(1)_ES93 affected —
12.5(1)_ES101 affected —
12.0(1)_ES91 affected —
12.5(1)_ES99 affected —
11.6(2)_ES85 affected —
12.6(1)_ES17 affected —
12.0(1)_ES92 affected —
12.5(1)_ES115 affected —
12.6(1)_ES27 affected —
12.6(1)_ES28 affected —
12.0(1)_ES83 affected —
12.5(1)_ES87 affected —
12.5(1)_ES90 affected —
12.0(1)_ET99 affected —
11.6(2)_ES80 affected —
12.5(1)_ES100 affected —
12.6(1)_ES21 affected —
12.5(1)_ES86 affected —
12.0(1)_ES101 affected —
11.6(2)_ES86 affected —
12.6(1)_ES22 affected —
12.5(1)_ES109 affected —
12.5(1)_ES110 affected —
12.0(1)_ET98 affected —
12.0(1)_ES97 affected —
12.0(1)_ES89 affected —
12.0(1)_ES90 affected —
12.6(1)_ES32 affected —
12.0(1)_ES86 affected —
12.5(1)_ES104 affected —
12.5(1)_ES103 affected —
12.0(1)_ES96 affected —
12.5(1)_ES91 affected —
12.5(1)_ET89 affected —
12.5(1)_ES112 affected —
12.6(1)_ES30 affected —
12.5(1)_ES47 affected —
12.5(1)_ES60 affected —
12.5(1)_ES66 affected —
12.5(1)_ES67 affected —
12.0(1)_ES78 affected —
12.5(1)_ES77 affected —
12.5(1)_ES76 affected —
12.6(1)_ES9 affected —
12.5(1)_ES55 affected —
11.6(1)_ET71 affected —
11.6(2)_ES72 affected —
12.5(1)_ES68 affected —
12.6(1) affected —
12.0(1)_ES74 affected —
11.6(2)_ES78 affected —
11.6(2)_ES76 affected —
12.5(1)_ES83 affected —
12.5(1)_ET84 affected —
12.6(1)_ES6 affected —
11.6(2)_ES75 affected —
12.5(1)_ES71 affected —
12.0(1)_ET72 affected —
12.5(1)_ES64 affected —
12.5(1)_ES63 affected —
12.5(1)_ES62 affected —
12.5(1)_ES65 affected —
12.0(1)_ES73 affected —
12.5(1)_ES59 affected —
12.6(1)_ES13 affected —
12.5(1)_ES61 affected —
11.6(2)_ES68 affected —
12.0(1)_ES70 affected —
12.5(1)_ES49 affected —
12.6(1)_ES8 affected —
12.5(1)_ES51 affected —
12.5(1)_ES75 affected —
12.5(1)_ES74 affected —
12.0(1)_ES79 affected —
12.5(1)_ES85 affected —
12.0(1)_ES76 affected —
11.6(2)_ES74 affected —
12.0(1)_ES77 affected —
12.5(1)_ES50 affected —
12.6(1)_ES15 affected —
12.0(1)_ES82 affected —
11.6(2)_ES77 affected —
12.5(1)_ES46 affected —
11.6(2)_ES69 affected —
11.6(2)_ES70 affected —
12.5(1)_ES58 affected —
11.6(2)_ES71 affected —
12.5(1)_ES70 affected —
12.5(1)_ES73 affected —
12.5(1)_ES69 affected —
12.5(1)_ES72 affected —
12.5(1)_ES80 affected —
11.6(2)_ES73 affected —
12.6(1)_ES11 affected —
12.5(1)_ES81 affected —
10.0(1) affected —
10.0(1)_ES1 affected —
11.6(2)_ES59 affected —
12.5(1)_ES16 affected —
12.0(1)_ES53 affected —
11.6(2)_ES56 affected —
12.0(1)_ES57 affected —
11.6(2)_ES58 affected —
12.0(1)_ES51 affected —
12.0(1)_ES65 affected —
12.5(1)_ES30 affected —
12.5(1)_ES32 affected —
12.0(1)_ES69 affected —
12.5(1)_ES42 affected —
12.5(1)_ET41 affected —
12.5(1)_ES45 affected —
11.6(2)_ES54 affected —
12.5(1)_ES19 affected —
12.5(1)_ES27 affected —
12.5(1)_ES18 affected —
12.5(1)_ES20 affected —
12.5(1)_ES15 affected —
11.6(2)_ES61 affected —
11.6(2)_ES62 affected —
12.0(1)_ES64 affected —
12.0(1)_ES63 affected —
12.0(1)_ES54 affected —
12.0(1)_ET61 affected —
11.6(2)_ES66 affected —
12.5(1)_ES17 affected —
12.5(1)_ES21 affected —
12.5(1)_ES35 affected —
12.0(1)_ES60 affected —
12.5(1)_ES28 affected —
12.5(1)_ES37 affected —
11.6(2)_ES65 affected —
12.5(1)_ES38 affected —
12.5(1)_ES40 affected —
12.0(1)_ES68 affected —
11.6(2)_ES67 affected —
12.5(1)_ES44 affected —
12.5(1)_ES43 affected —
11.6(2)_ES55 affected —
12.0(1)_ES55 affected —
12.5(1)_ES24 affected —
12.0(1)_ES58 affected —
12.5(1)_ET29 affected —
12.5(1)_ES26 affected —
12.5(1)_ES13 affected —
11.6(2)_ES53 affected —
11.6(2)_ET57 affected —
12.0(1)_ES67 affected —
12.0(1)_ES66 affected —
11.6(2)_ES52 affected —
11.0(3)_ET9 affected —
12.5(1)_ES31 affected —
12.5(1)_ES39 affected —
12.0(1)_ES52 affected —
11.6(2)_ES51 affected —
11.6(2)_ES64 affected —
12.5(1)_ES22 affected —
11.6(2)_ES60 affected —
12.5(1)_ES25 affected —
12.5(1)_ES34 affected —
11.6(2)_ES63 affected —
12.0(1)_ES62 affected —
12.5(1)_ES33 affected —
11.6(2)_ES27 affected —
12.0(1)_ES48 affected —
12.5(1)_ES7 affected —
12.0(1)_ET36 affected —
12.0(1)_ES49 affected —
12.5(1)_ES2 affected —
12.5(1) affected —
11.6(2)_ES48 affected —
12.0(1)_ES37 affected —
12.5(1)_ES11 affected —
11.6(2)_ES47 affected —
11.6(2)_ES45 affected —
11.6(2)_ES23 affected —
11.6(2)_ES26 affected —
11.6(2)_ES24 affected —
11.6(2)_ET22 affected —
11.6(2)_ET29 affected —
12.0(1)_ES41 affected —
11.6(2)_ES35 affected —
12.0(1)_ES42 affected —
12.0(1)_ES43 affected —
11.6(2)_ES37 affected —
11.6(2)_ES28 affected —
11.6(2)_ET40 affected —
12.0(1)_ES44 affected —
12.5(1)_ES4 affected —
12.5(1)_ES5 affected —
11.6(2)_ES38 affected —
12.0(1)_ES46 affected —
11.6(2)_ES39 affected —
11.6(2)_ES42 affected —
11.6(2)_ES41 affected —
11.6(2)_ES43 affected —
12.0(1)_ES50 affected —
12.5(1)_ES9 affected —
11.6(2)_ES30 affected —
11.6(2)_ES31 affected —
10.5(3)_ET55 affected —
11.0(3)_ET8 affected —
11.6(2)_ES32 affected —
12.0(1)_ES40 affected —
11.6(2)_ES33 affected —
12.5(1)_ES12 affected —
11.6(2)_ES44 affected —
12.0(1)_ES18 affected —
11.6(2)_ES19 affected —
11.6(1)_ET69 affected —
11.6(2) affected —
11.5(1)_ES50 affected —
11.6(2)_ES3 affected —
11.6(2)_ES9 affected —
11.6(1)_ET63 affected —
12.0(1)_ES21 affected —
11.6(2)_ES12 affected —
11.0(3)_ES6 affected —
11.5(1)_ES49 affected —
12.0(1)_ES13 affected —
11.6(2)_ES7 affected —
11.6(2)_ET18 affected —
12.0.1a affected —
11.6(2)_ES14 affected —
11.6(2)_ES16 affected —
11.6(2)_ES4 affected —
11.6(2)_ES21 affected —
11.5(1)_ES51 affected —
12.0(1)_ES20 affected —
11.6(2)_ET5 affected —
11.6(2)_ES8 affected —
11.6(1)_ES65 affected —
12.0(1)_ES15 affected —
12.0(1)_ES27 affected —
11.6(2)_ES20 affected —
10.0(2)_ET49 affected —
11.6(2)_ET10 affected —
12.0(1)_ES26 affected —
12.0(1)_ES35 affected —
12.0(1)_ES34 affected —
12.0(1)_ES12 affected —
11.6(2)_ES2 affected —
11.6(2)_ES13 affected —
11.6(2)_ES15 affected —
12.0(1)_ES33 affected —
11.6(2)_ES1 affected —
11.5(1)_ES52 affected —
12.0(1)_ES28 affected —
12.0(1)_ES29 affected —
12.0(1)_ES30 affected —
11.6(2)_ES11 affected —
11.6(1)_ES66 affected —
10.5(3)_ES54 affected —
11.6(2)_ET17 affected —
12.0(1)_ES11 affected —
11.0(3)_ES7 affected —
11.6(1)_ES27 affected —
11.6(1)_ES30 affected —
11.6(1)_ES59 affected —
11.6(1)_ES21 affected —
11.5(1)_ES40 affected —
11.6(1)_ES25 affected —
11.6(1)_ES31 affected —
11.6(1)_ES42 affected —
11.5(1)_ES44 affected —
11.6(1)_ES53 affected —
11.5(1)_ES35 affected —
11.5(1)_ES37 affected —
11.6(1)_ES36 affected —
10.5(3)_ET51 affected —
11.6(1)_ES61 affected —
11.6(1)_ES23 affected —
11.5(1)_ES36 affected —
11.6(1)_ES44 affected —
10.5(3)_ES39 affected —
11.6(1)_ES19 affected —
11.6(1)_ES49 affected —
11.0(3)_ES2 affected —
11.5(1)_ES33 affected —
10.5(3)_ES38 affected —
10.5(3)_ES50 affected —
12.0(1)_ES7 affected —
11.6(1)_ES39 affected —
10.5(3)_ES49 affected —
11.0(3)_ES3 affected —
11.6(1)_ES48 affected —
11.5(1)_ES42 affected —
11.0(3)_ES5 affected —
11.5(1)_ES46 affected —
11.6(1)_ES46 affected —
11.6(1)_ES47 affected —
11.6(1)_ES50 affected —
11.6(1)_ET54 affected —
11.6(1)_ES52 affected —
11.6(1)_ES51 affected —
11.0(3)_ES4 affected —
11.6(1)_ES56 affected —
11.6(1)_ES20 affected —
10.5(3)_ES44 affected —
11.5(1)_ES47 affected —
11.6(1)_ES58 affected —
11.5(1)_ES41 affected —
11.6(1)_ES55 affected —
11.6(1)_ES28 affected —
10.5(3)_ES41 affected —
12.0(1) affected —
11.6(1)_ES40 affected —
10.5(3)_ES42 affected —
11.6(1)_ET60 affected —
11.6(1)_ES45 affected —
10.5(3)_ES43 affected —
11.6(1)_ES41 affected —
10.5(3)_ES48 affected —
11.6(1)_ES32 affected —
11.6(1)_ES34 affected —
11.6(1)_ES62 affected —
11.6(1)_ES24 affected —
11.6(1)_ES38 affected —
11.5(1)_ES34 affected —
11.6(1)_ES26 affected —
11.5(1)_ES38 affected —
11.6(1)_ES35 affected —
11.6(1)_ES22 affected —
10.5(3)_ES47 affected —
12.0(1)_ES6 affected —
11.6(1)_ES33 affected —
11.5(1)_ES39 affected —
10.5(3)_ES45 affected —
11.6(1) affected —
10.5(3)_ES23 affected —
11.5(1)_ES29 affected —
10.5(3)_ES36 affected —
11.5(1)_ES28 affected —
10.5(3)_ES34 affected —
11.6(1)_ES3 affected —
11.5(1)_ES19 affected —
10.5(1)_ES28 affected —
10.0(2)_ES42 affected —
11.6(1)_ES7 affected —
11.5(1)_ES26 affected —
11.6(1)_ES10 affected —
11.6(1)_ES11 affected —
11.5(1)_ES16 affected —
11.5(1)_ES18 affected —
10.0(2)_ES41 affected —
10.5(3)_ES15 affected —
10.5(3)_ES17 affected —
11.5(1)_ES17 affected —
11.5(1)_ES31 affected —
11.6(1)_ES14 affected —
11.6(1)_ES17 affected —
11.5(1)_ES15 affected —
11.0(2)_ES45 affected —
11.5(1)_ES20 affected —
10.5(3)_ET22 affected —
10.5(3)_ES27 affected —
10.5(3)_ES32 affected —
11.5(1)_ES23 affected —
11.6(1)_ES4 affected —
11.0(3) affected —
11.6(1)_ES18 affected —
10.0(2)_ES43 affected —
10.5(3)_ES31 affected —
11.6(1)_ES5 affected —
11.0(2)_ES42 affected —
11.5(1)_ES21 affected —
11.0(2)_ES44 affected —
11.0(2)_ES38 affected —
10.5(3)_ES20 affected —
11.6(1)_ES2 affected —
11.0(2)_ES40 affected —
10.5(3)_ES19 affected —
10.0(2)_ES46 affected —
10.0(2)_ES47 affected —
10.5(3)_ES29 affected —
11.6(1)_ES9 affected —
10.0(2)_ES45 affected —
10.5(3)_ET25 affected —
11.6(1)_ES12 affected —
10.5(3)_ES33 affected —
11.5(1)_ES30 affected —
11.5(1)_ES25 affected —
10.5(3)_ES30 affected —
10.5(3)_ES24 affected —
10.5(3)_ES35 affected —
11.0(2)_ES9 affected —
10.5(2)_ES52 affected —
11.0(2)_ES37 affected —
10.0(2)_ES39 affected —
11.0(2)_ES27 affected —
10.5(2)_ES55 affected —
11.5(1)_ES7 affected —
11.0(1)_ES6 affected —
10.5(2)_ES48 affected —
11.0(2)_ES33 affected —
10.0(2)_ES37 affected —
11.0(2)_ES10 affected —
10.0(2)_ES36 affected —
11.0(2)_ES24 affected —
10.5(3)_ES1 affected —
10.5(3)_ES12 affected —
11.5(1)_ES13 affected —
10.5(2)_ES46 affected —
10.5(2)_ES49 affected —
11.0(2)_ES31 affected —
11.0(2)_ES35 affected —
10.5(3)_ES10 affected —
11.0(1)_ES5 affected —
10.0(2)_ES33 affected —
10.5(2)_ES47 affected —
10.5(3)_ES5 affected —
11.0(2)_ES20 affected —
10.5(3)_ES6 affected —
10.5(3)_ES13 affected —
11.0(2)_ES12 affected —
10.5(2)_ES42 affected —
11.0(2)_ES15 affected —
10.5(3) affected —
11.0(2)_ES34 affected —
11.0(2)_ES29 affected —
10.5(2)_ES44 affected —
11.5(1)_ES8 affected —
10.0(2)_ES32 affected —
10.5(2)_ES43 affected —
10.5(2)_ES45 affected —
11.0(2)_ES16 affected —
11.0(2)_ES18 affected —
11.5(1)_ES4 affected —
10.5(3)_ES4 affected —
11.5(1)_ES5 affected —
11.0(2)_ES28 affected —
11.5(1)_ES10 affected —
10.0(2)_ES38 affected —
11.5(1)_ES11 affected —
11.5(1)_ES12 affected —
10.5(3)_ES3 affected —
10.0(2)_ES40 affected —
11.0(2)_ES13 affected —
10.5(3)_ES14 affected —
10.5(3)_ES8 affected —
11.5(1) affected —
11.0(1)_ES9 affected —
10.0(2)_ES35 affected —
11.0(2)_ES23 affected —
11.0(1)_ES10 affected —
11.0(1)_ES8 affected —
11.0(2)_ES11 affected —
11.0(2)_ES25 affected —
10.5(2)_ES53 affected —
10.5(1)_ES27 affected —
12.5(2)_ES20 affected —
12.5(2)_ES21 affected —
12.6(1)_ES58 affected —
12.5(2)_ES22 affected —
12.6(1)_ES59 affected —
12.5(2)_ES23 affected —
12.5(1)_ES144 affected —
12.5(2)_ES24 affected —
12.5(2)_ES25 affected —
12.6(1)_ES60 affected —
12.5(1)_ET145 affected —
12.5(2)_ES26 affected —
11.6(2)_ES88 affected —
12.6(2) affected —
12.6(1)_ES61 affected —
12.5(1)_ET146 affected —
12.6(1)_ES63 affected —
12.6(1)_ES62 affected —
12.5(2)_ES27 affected —
12.5(1)_ES147 affected —
12.5(2)_ES29 affected —
12.6(1)_ES65 affected —
12.0(1)_ET107 affected —
12.6(2)_ES7 affected —
12.6(1)_ES66 affected —
12.5(2)_ES30 affected —
12.6(2)_ES9 affected —
12.5(2)_ES28 affected —
12.5(2)_ES31 affected —
12.5(2)_ES32 affected —
12.6(1)_ES67 affected —
12.6(2)_ES10 affected —
12.5(2)_ES33 affected —
12.6(1)_ES69 affected —
12.6(2)_ES13 affected —
12.6(2)_ES12 affected —
12.6(2)_ES4 affected —
12.6(2)_ES14 affected —
12.6(1)_ET70 affected —
12.6(2)_ET15 affected —
12.5(2)_ES35 affected —
12.6(2)_ES16 affected —
12.6(2)_ES17 affected —
12.6(2)_ES8 affected —
12.6(2)_ET18 affected —
12.6(2)_ES19 affected —
12.6(2)_ET21 affected —
12.6(2)_ET20 affected —
12.5(2)_ES36 affected —
12.6(2)_ES23 affected —
12.6(2)_ES26 affected —
12.6(1)_ES71 affected —
12.6(2)_ES27 affected —
12.5(2)_ET37 affected —
12.6(2)_ET28 affected —
12.6(2)_ET30 affected —
12.6(2)_ES25 affected —
12.6(2)_ES29 affected —
12.6(2)_ET31 affected —
12.6(2)_ES32 affected —
12.6(2)_ES33 affected —
12.6(2)_ET34 affected —
12.5(2)_ES38 affected —
12.6(2)_ET39 affected —
12.6(1)_ES72 affected —
12.6(2)_ET40 affected —
12.6(1)_ET73 affected —
12.5(2)_ES39 affected —
12.6(2)_ES35 affected —
12.6(2)_ES36 affected —
12.6(2)_ES37 affected —
12.6(2)_ES38 affected —
12.5(2)_ES41 affected —
12.6(2)_ET41 affected —
12.6(2)_ET42 affected —
12.6(2)_ES44 affected —
12.6(2)_ES45 affected —
12.6(2)_ES46 affected —
12.6(2)_ES43 affected —
12.6(2)_ET47 affected —
12.6(2)_ES51 affected —
12.5(2)_ES42 affected —
12.6(2)_ET57 affected —
12.6(2)_ET52 affected —
12.6(2)_ET59 affected —
12.6(2)_ES55 affected —
12.6(2)_ES56 affected —
12.6(2)_ES53 affected —
12.6(2)_ES54 affected —
12.5(2)_ES43 affected —
12.5(2)_ES44 affected —
12.6(1)_ET74 affected —
12.5(2)_ES45 affected —
12.6(2)_ET62 affected —
12.6(2)_ET64 affected —
12.6(2)_ET65 affected —
12.6(1)_ET75 affected —
12.6(1)_ET76 affected —
12.6(2)_ET66 affected —
12.6(2)_ET72 affected —
12.6(2)_ET73 affected —
12.6(2)_ET74 affected —
15.0(1) affected —

Configuration 1 [-]

cpe:2.3:a:cisco:unified_intelligent_contact_management_enterprise:*:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Cisco Subscribe
Unified Intelligent Contact Management Enterprise Subscribe

Project Subscriptions

Vendors Products
Cisco Subscribe
Unified Intelligent Contact Management Enterprise Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2025-16889 A vulnerability in the web-based management interface of Cisco Unified Intelligent Contact Management Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-icm-xss-cfcqhXAg cve-icon cve-icon
History

Tue, 22 Jul 2025 15:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:cisco:unified_intelligent_contact_management_enterprise:*:*:*:*:*:*:*:*

Wed, 04 Jun 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 04 Jun 2025 16:30:00 +0000

Type Values Removed Values Added
Description A vulnerability in the web-based management interface of Cisco Unified Intelligent Contact Management Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Title Cisco Unified Intelligent Contact Management Enterprise Cross-Site Scripting vulnerability
Weaknesses CWE-79
References
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2025-06-04T18:19:56.528Z

Reserved: 2024-10-10T19:15:13.245Z

Link: CVE-2025-20273

cve-icon Vulnrichment

Updated: 2025-06-04T18:13:06.926Z

cve-icon NVD

Status : Analyzed

Published: 2025-06-04T17:15:27.050

Modified: 2025-07-22T15:16:05.243

Link: CVE-2025-20273

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-07-12T15:26:22Z

Weaknesses