cisco-sa-cuis-ssrf-JSuDjeV

Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerability

Advisory ansehen veröffentlicht 2025-07-16

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-20288US	medium5.3	0.38% (32nd)	—	2025-07-16
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Security Vulnerability Policyexternal
Cisco Unified Intelligence Center Server-Side Request Forgery Vulnerabilityself
Cisco Security Vulnerability Policyexternal
considering software upgradesexternal
Cisco Security Advisories pageexternal

Behebungen (2)

BehobenCisco Unified Contact Center Express
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco Unified Intelligence Center
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan