Cisco Cisco Unified Contact Center Express

Name: Cisco Cisco Unified Contact Center Express
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical12high20medium0low

updated 2026-10-28

vulnerabilities (45)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-20404US	medium5.3	22.6% (98th)	Exploit	no fix	2024-06-05	2 versions
CVE-2024-20405US	medium6.1	0.65% (51st)	Exploit	no fix	2024-06-05	2 versions
CVE-2020-3280US	critical9.8	7.12% (94th)	—	no fix	2020-05-22	2 versions
CVE-2019-1888US	high7.2	3.42% (89th)	—	no fix	2020-09-23	2 versions
CVE-2018-0403US	critical9.8	2.63% (85th)	—	no fix	2018-07-18	—
CVE-2024-20253US	critical10.0	2.40% (84th)	—	no fix	2024-01-26	59 versions
CVE-2017-6779US	high7.5	1.98% (80th)	—	no fix	2018-06-07	—
CVE-2019-12633US	high7.5	1.52% (74th)	—	12.0(1)SU0.1	2019-09-05	2 versions
CVE-2018-0400US	medium6.1	1.27% (70th)	—	no fix	2018-07-18	—
CVE-2019-1860US	medium5.9	1.26% (69th)	—	no fix	2019-05-16	—
CVE-2019-1670US	medium6.1	1.21% (68th)	—	no fix	2019-02-07	2 versions
CVE-2018-0401US	medium6.1	1.21% (68th)	—	no fix	2018-07-18	—
CVE-2017-6722US	medium6.1	1.15% (67th)	—	no fix	2017-07-04	—
CVE-2025-20374US	—	1.14% (66th)	—	no fix	2025-11-05	58 versions
CVE-2019-15259US	medium6.1	1.06% (64th)	—	n/a	2019-10-02	2 versions
CVE-2018-0402US	high8.8	1.01% (63rd)	—	no fix	2018-07-18	—
CVE-2025-20358US	critical9.8OT elevated	0.92% (60th)	—	no fix	2025-11-05	58 versions
CVE-2025-20354US	—	0.87% (59th)	—	no fix	2025-11-05	58 versions
CVE-2021-1463US	medium6.1	0.82% (57th)	—	no fix	2021-04-08	2 versions
CVE-2021-1395US	medium6.1	0.81% (57th)	—	no fix	2021-06-16	2 versions
CVE-2020-3267US	high7.1	0.81% (57th)	—	no fix	2020-06-03	2 versions
CVE-2019-12626US	medium4.8	0.80% (57th)	—	12.0(1)ES02	2019-08-21	2 versions
CVE-2023-20088US	high7.5	0.80% (56th)	—	no fix	2023-03-03	—
CVE-2021-1358US	medium6.1	0.78% (56th)	—	no fix	2021-05-22	2 versions
CVE-2021-1254US	medium4.8	0.72% (54th)	—	no fix	2021-05-22	2 versions
CVE-2026-20362US	high7.2	0.57% (47th)	—	no fix	2026-10-07	—
CVE-2023-20232US	medium5.3	0.55% (46th)	—	no fix	2023-08-16	56 versions
CVE-2023-20096US	medium5.4	0.50% (43rd)	—	no fix	2023-04-05	2 versions
CVE-2023-20058US	medium6.1	0.49% (42nd)	—	no fix	2023-01-20	8 versions
CVE-2025-20376US	high7.2	0.48% (41st)	—	no fix	2025-11-05	58 versions
CVE-2025-20274US	high8.8	0.47% (41st)	—	no fix	2025-07-16	57 versions
CVE-2025-20276US	high7.2	0.45% (39th)	—	no fix	2025-06-04	61 versions
CVE-2025-20129US	medium5.4	0.42% (36th)	—	no fix	2025-06-04	61 versions
CVE-2025-20113US	—	0.42% (36th)	—	no fix	2025-05-21	121 versions
CVE-2025-20375US	high7.2	0.39% (33rd)	—	no fix	2025-11-05	58 versions
CVE-2025-20288US	medium5.3	0.38% (32nd)	—	no fix	2025-07-16	57 versions
CVE-2025-20114US	—	0.35% (28th)	—	no fix	2025-05-21	121 versions
CVE-2025-20377US	—	0.27% (20th)	—	no fix	2025-11-05	58 versions
CVE-2025-20279US	—	0.26% (18th)	—	no fix	2025-06-04	61 versions
CVE-2026-20117US	—	0.22% (12th)	—	no fix	2026-03-11	63 versions
CVE-2026-20116US	—	0.22% (12th)	—	no fix	2026-03-11	63 versions
CVE-2025-20275US	high7.8	0.19% (9th)	—	no fix	2025-06-04	61 versions
CVE-2025-20278US	medium6.7	0.18% (7th)	—	no fix	2025-06-04	61 versions
CVE-2025-20277US	medium6.7	0.17% (6th)	—	no fix	2025-06-04	61 versions
CVE-2025-20112US	—	0.14% (4th)	—	no fix	2025-05-21	62 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')15 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type5 CVEs
CWE-918Server-Side Request Forgery (SSRF)5 CVEs
CWE-502Deserialization of Untrusted Data4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-285Improper Authorization2 CVEs

sources (3)

Which sources assert this record, and when.

USCisco PSIRT (CSAF)45 CVEs
EUEU Vulnerability Database (ENISA)36 CVEs
NLNCSC-NL (CSAF)2 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan