Cisco Unified Contact Center Enterprise vulnerabilities

3 known vulnerabilities in Cisco Unified Contact Center Enterprise from Cisco. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Cisco Unified Contact Center Enterprise: Improper Access Control

  CVE-2025-20242May 21, 2025CiscoEPSS 5.9%

  A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls

• 10.0 Critical severity

  Cisco Unified Contact Center Enterprise: Deserialization of Untrusted Data

  CVE-2024-20253Jan 26, 2024CiscoEPSS 2.4%

  A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provide

• 7.5 High severity

  Cisco Unified Contact Center Enterprise: Improper Authorization

  CVE-2023-20088Mar 3, 2023Cisco

  A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for new and existing users who are connected thr