Cisco Unified Contact Center Express (UCCX)

Name: Cisco Unified Contact Center Express (UCCX)
Brand: Cisco

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical5high2medium0low

updated 2026-10-27

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20374US	—	1.14% (66th)	—	15.0 ES01	2025-11-05	2 versions
CVE-2025-20358US	critical9.8OT elevated	0.92% (60th)	—	15.0 ES01	2025-11-05	3 versions
CVE-2025-20354US	—	0.87% (59th)	—	15.0 ES01	2025-11-05	3 versions
CVE-2026-20362US	high7.2	0.57% (47th)	—	15.0(1) SU2	2026-10-07	< 15.0(1) SU2
CVE-2025-20376US	high7.2	0.48% (41st)	—	15.0 ES01	2025-11-05	2 versions
CVE-2025-20276US	high7.2	0.45% (39th)	—	15.0(1)	2025-06-04	< 15.0(1)
CVE-2025-20113US	—	0.42% (36th)	—	no fix	2025-05-21	≤ 12.5(1)SU3
CVE-2025-20375US	high7.2	0.39% (33rd)	—	15.0 ES01	2025-11-05	2 versions
CVE-2025-20114US	—	0.35% (28th)	—	no fix	2025-05-21	≤ 12.5(1)SU3
CVE-2025-20377US	—	0.27% (20th)	—	15.0 ES01	2025-11-05	2 versions
CVE-2025-20279US	—	0.26% (18th)	—	15.0(1)	2025-06-04	< 15.0(1)
CVE-2026-20117US	—	0.22% (12th)	—	15.0 ES0	2026-03-11	< 15.0 ES0
CVE-2026-20116US	—	0.22% (12th)	—	15.0 ES0	2026-03-11	< 15.0 ES0
CVE-2025-20275US	high7.8	0.19% (9th)	—	15.0(1)	2025-06-04	< 15.0(1)
CVE-2025-20278US	medium6.7	0.18% (7th)	—	15.0(1)	2025-06-04	< 15.0(1)
CVE-2025-20277US	medium6.7	0.17% (6th)	—	15.0(1)	2025-06-04	< 15.0(1)

The flaw types (CWEs) most of these CVEs share.

CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-602Client-Side Enforcement of Server-Side Security1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.