A vulnerability in the web-based management interface of  Cisco Finesse, Cisco Packaged Contact Center Enterprise (Packaged CCE), Cisco Unified Contact Center Enterprise (Unified CCE), Cisco Unified Contact Center Express (Unified CCX), and Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface.

This vulnerability exists because the web-based management interface of an affected system does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Cisco Cisco Unified Contact Center Express unknown
Version Status Constraints
10.5(1)SU1 affected —
10.6(1) affected —
11.6(1) affected —
10.6(1)SU1 affected —
10.6(1)SU3 affected —
11.6(2) affected —
12.0(1) affected —
11.0(1)SU1 affected —
11.5(1)SU1 affected —
10.5(1) affected —
12.5(1) affected —
12.5(1)SU1 affected —
12.5(1)SU2 affected —
12.5(1)SU3 affected —
12.5(1)_SU03_ES01 affected —
12.5(1)_SU03_ES02 affected —
12.5(1)_SU02_ES03 affected —
12.5(1)_SU02_ES04 affected —
12.5(1)_SU02_ES02 affected —
12.5(1)_SU01_ES02 affected —
12.5(1)_SU01_ES03 affected —
12.5(1)_SU02_ES01 affected —
11.6(2)ES07 affected —
11.6(2)ES08 affected —
12.5(1)_SU01_ES01 affected —
12.0(1)ES04 affected —
12.5(1)ES02 affected —
12.5(1)ES03 affected —
11.6(2)ES06 affected —
12.5(1)ES01 affected —
12.0(1)ES03 affected —
12.0(1)ES01 affected —
11.6(2)ES05 affected —
12.0(1)ES02 affected —
11.6(2)ES04 affected —
11.6(2)ES03 affected —
11.6(2)ES02 affected —
11.6(2)ES01 affected —
10.6(1)SU3ES03 affected —
11.0(1)SU1ES03 affected —
10.6(1)SU3ES01 affected —
10.5(1)SU1ES10 affected —
11.5(1)SU1ES03 affected —
11.6(1)ES02 affected —
11.5(1)ES01 affected —
10.6(1)SU2 affected —
10.6(1)SU2ES04 affected —
11.6(1)ES01 affected —
10.6(1)SU3ES02 affected —
11.5(1)SU1ES02 affected —
11.5(1)SU1ES01 affected —
11.0(1)SU1ES02 affected —
12.5(1)_SU03_ES03 affected —
12.5(1)_SU03_ES04 affected —
12.5(1)_SU03_ES05 affected —
UCCX 15.0.1 affected —
12.5(1)_SU03_ES06 affected —
12.5(1)_SU03_ES07 affected —
15.0(1) affected —
15.0(1)ES01 affected —
15.0(1)ES-MSOauth affected —
1501_ES01_CSCws06843 affected —

No data.

No data.

No data.

Project Subscriptions

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-xss-MrNAH5Jh cve-icon cve-icon
History

Wed, 11 Mar 2026 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Mar 2026 17:00:00 +0000

Type Values Removed Values Added
Description A vulnerability in the web-based management interface of  Cisco Finesse, Cisco Packaged Contact Center Enterprise (Packaged CCE), Cisco Unified Contact Center Enterprise (Unified CCE), Cisco Unified Contact Center Express (Unified CCX), and Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability exists because the web-based management interface of an affected system does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Title Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities
Weaknesses CWE-79
References
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2026-03-11T17:20:21.361Z

Reserved: 2025-10-08T11:59:15.376Z

Link: CVE-2026-20116

cve-icon Vulnrichment

Updated: 2026-03-11T17:14:21.279Z

cve-icon NVD

Status : Received

Published: 2026-03-11T17:16:55.730

Modified: 2026-03-11T17:16:55.730

Link: CVE-2026-20116

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses