CVE-2025-20377
Full vulnerability record from the local CVENow database.
Description
A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system. This vulnerability is due to improper validation of requests to certain API endpoints. An attacker could exploit this vulnerability by sending a valid request to a specific API endpoint within the affected system. A successful exploit could allow a low-privileged user to view sensitive information on the affected system that should be restricted. To exploit this vulnerability, the attacker must have valid user credentials on the affected system.
Severity
MEDIUM
CVSS score
4.3
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2025-11-05 17:15:39.200000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-20377",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:39.200",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system.\r\n\r\nThis vulnerability is due to improper validation of requests to certain API endpoints. An attacker could exploit this vulnerability by sending a valid request to a specific API endpoint within the affected system. A successful exploit could allow a low-privileged user to view sensitive information on the affected system that should be restricted. To exploit this vulnerability, the attacker must have valid user credentials on the affected system."
},
{
"lang": "es",
"value": "Una vulnerabilidad en el subsistema API de Cisco Unified Intelligence Center podría permitir a un atacante remoto autenticado obtener información sensible de un sistema afectado.\n\nEsta vulnerabilidad se debe a una validación incorrecta de las solicitudes a ciertos endpoints API. Un atacante podría explotar esta vulnerabilidad enviando una solicitud válida a un endpoint API específico dentro del sistema afectado. Un exploit exitoso podría permitir a un usuario con bajos privilegios ver información sensible en el sistema afectado que debería estar restringida. Para explotar esta vulnerabilidad, el atacante debe tener credenciales de usuario válidas en el sistema afectado."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Packaged Contact Center Enterprise",
"defaultStatus": "unknown",
"versions": [
{
"version": "12.5(1)",
"status": "affected"
},
{
"version": "11.0(1)",
"status": "affected"
},
{
"version": "12.0(1)",
"status": "affected"
},
{
"version": "11.0(2)",
"status": "affected"
},
{
"version": "11.5(1)",
"status": "affected"
},
{
"version": "10.5(1)",
"status": "affected"
},
{
"version": "10.5(2)",
"status": "affected"
},
{
"version": "11.6(2)",
"status": "affected"
},
{
"version": "10.5(1)_ES7",
"status": "affected"
},
{
"version": "11.6(1)",
"status": "affected"
},
{
"version": "10.5(2)_ES8",
"status": "affected"
},
{
"version": "12.6(1)",
"status": "affected"
},
{
"version": "12.5(2)",
"status": "affected"
},
{
"version": "12.6(2)",
"status": "affected"
},
{
"version": "15.0(1)",
"status": "affected"
}
]
},
{
"vendor": "Cisco",
"product": "Cisco Unified Contact Center Enterprise",
"defaultStatus": "unknown",
"versions": [
{
"version": "12.6(1)ES3",
"status": "affected"
},
{
"version": "12.6(1)ES1",
"status": "affected"
},
{
"version": "12.6(1)",
"status": "affected"
},
{
"version": "12.6(1)ES2",
"status": "affected"
},
{
"version": "12.6(1)SecurityPatch",
"status": "affected"
},
{
"version": "12.5(1)ES1",
"status": "affected"
},
{
"version": "12.5(1)",
"status": "affected"
},
{
"version": "12.6(1)ES4",
"status": "affected"
},
{
"version": "11.0(1)",
"status": "affected"
},
{
"version": "10.5(1)",
"status": "affected"
},
{
"version": "12.0(1)",
"status": "affected"
},
{
"version": "10.5",
"status": "affected"
},
{
"version": "11.0",
"status": "affected"
},
{
"version": "11.5",
"status": "affected"
},
{
"version": "12.6(2)",
"status": "affected"
},
{
"version": "12.6(2)ES1",
"status": "affected"
},
{
"version": "12.6(2)ES2",
"status": "affected"
},
{
"version": "15.0(1)",
"status": "affected"
},
{
"version": "12.6(2)ES3",
"status": "affected"
},
{
"version": "15.0(1)ET01",
"status": "affected"
},
{
"version": "15.0(1)_SP1",
"status": "affected"
}
]
},
{
"vendor": "Cisco",
"product": "Cisco Unified Contact Center Express",
"defaultStatus": "unknown",
"versions": [
{
"version": "10.5(1)SU1",
"status": "affected"
},
{
"version": "10.6(1)",
"status": "affected"
},
{
"version": "11.6(1)",
"status": "affected"
},
{
"version": "10.6(1)SU1",
"status": "affected"
},
{
"version": "10.6(1)SU3",
"status": "affected"
},
{
"version": "11.6(2)",
"status": "affected"
},
{
"version": "12.0(1)",
"status": "affected"
},
{
"version": "11.0(1)SU1",
"status": "affected"
},
{
"version": "11.5(1)SU1",
"status": "affected"
},
{
"version": "10.5(1)",
"status": "affected"
},
{
"version": "12.5(1)",
"status": "affected"
},
{
"version": "12.5(1)SU1",
"status": "affected"
},
{
"version": "12.5(1)SU2",
"status": "affected"
},
{
"version": "12.5(1)SU3",
"status": "affected"
},
{
"version": "12.5(1)_SU03_ES01",
"status": "affected"
},
{
"version": "12.5(1)_SU03_ES02",
"status": "affected"
},
{
"version": "12.5(1)_SU02_ES03",
"status": "affected"
},
{
"version": "12.5(1)_SU02_ES04",
"status": "affected"
},
{
"version": "12.5(1)_SU02_ES02",
"status": "affected"
},
{
"version": "12.5(1)_SU01_ES02",
"status": "affected"
},
{
"version": "12.5(1)_SU01_ES03",
"status": "affected"
},
{
"version": "12.5(1)_SU02_ES01",
"status": "affected"
},
{
"version": "11.6(2)ES07",
"status": "affected"
},
{
"version": "11.6(2)ES08",
"status": "affected"
},
{
"version": "12.5(1)_SU01_ES01",
"status": "affected"
},
{
"version": "12.0(1)ES04",
"status": "affected"
},
{
"version": "12.5(1)ES02",
"status": "affected"
},
{
"version": "12.5(1)ES03",
"status": "affected"
},
{
"version": "11.6(2)ES06",
"status": "affected"
},
{
"version": "12.5(1)ES01",
"status": "affected"
},
{
"version": "12.0(1)ES03",
"status": "affected"
},
{
"version": "12.0(1)ES01",
"status": "affected"
},
{
"version": "11.6(2)ES05",
"status": "affected"
},
{
"version": "12.0(1)ES02",
"status": "affected"
},
{
"version": "11.6(2)ES04",
"status": "affected"
},
{
"version": "11.6(2)ES03",
"status": "affected"
},
{
"version": "11.6(2)ES02",
"status": "affected"
},
{
"version": "11.6(2)ES01",
"status": "affected"
},
{
"version": "10.6(1)SU3ES03",
"status": "affected"
},
{
"version": "11.0(1)SU1ES03",
"status": "affected"
},
{
"version": "10.6(1)SU3ES01",
"status": "affected"
},
{
"version": "10.5(1)SU1ES10",
"status": "affected"
},
{
"version": "11.5(1)SU1ES03",
"status": "affected"
},
{
"version": "11.6(1)ES02",
"status": "affected"
},
{
"version": "11.5(1)ES01",
"status": "affected"
},
{
"version": "10.6(1)SU2",
"status": "affected"
},
{
"version": "10.6(1)SU2ES04",
"status": "affected"
},
{
"version": "11.6(1)ES01",
"status": "affected"
},
{
"version": "10.6(1)SU3ES02",
"status": "affected"
},
{
"version": "11.5(1)SU1ES02",
"status": "affected"
},
{
"version": "11.5(1)SU1ES01",
"status": "affected"
},
{
"version": "11.0(1)SU1ES02",
"status": "affected"
},
{
"version": "12.5(1)_SU03_ES03",
"status": "affected"
},
{
"version": "12.5(1)_SU03_ES04",
"status": "affected"
},
{
"version": "12.5(1)_SU03_ES05",
"status": "affected"
},
{
"version": "UCCX 15.0.1",
"status": "affected"
},
{
"version": "12.5(1)_SU03_ES06",
"status": "affected"
}
]
},
{
"vendor": "Cisco",
"product": "Cisco Unified Intelligence Center",
"defaultStatus": "unknown",
"versions": [
{
"version": "11.6(1)",
"status": "affected"
},
{
"version": "10.5(1)",
"status": "affected"
},
{
"version": "11.0(1)",
"status": "affected"
},
{
"version": "11.5(1)",
"status": "affected"
},
{
"version": "12.0(1)",
"status": "affected"
},
{
"version": "12.5(1)",
"status": "affected"
},
{
"version": "11.0(2)",
"status": "affected"
},
{
"version": "12.6(1)",
"status": "affected"
},
{
"version": "12.5(1)SU",
"status": "affected"
},
{
"version": "12.6(1)_ET",
"status": "affected"
},
{
"version": "12.6(1)_ES05_ET",
"status": "affected"
},
{
"version": "11.0(3)",
"status": "affected"
},
{
"version": "12.6(2)",
"status": "affected"
},
{
"version": "12.6(2)_504_Issue_ET",
"status": "affected"
},
{
"version": "12.6.1_ExcelIssue_ET",
"status": "affected"
},
{
"version": "12.6(2)_Permalink_ET",
"status": "affected"
},
{
"version": "12.6.2_CSCwk19536_ET",
"status": "affected"
},
{
"version": "12.6.2_CSCwm96922_ET",
"status": "affected"
},
{
"version": "12.6.2_Amq_OOS_ET",
"status": "affected"
},
{
"version": "12.5(2)ET_CSCwi79933",
"status": "affected"
},
{
"version": "12.6(2)_ET",
"status": "affected"
},
{
"version": "12.6.2_CSCwn48501_ET",
"status": "affected"
},
{
"version": "15.0(1)",
"status": "affected"
},
{
"version": "12.6.2_CSCwp61293_ET",
"status": "affected"
},
{
"version": "12.6.2_CSCwp92614_ET",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-11-05T20:13:55.442333Z",
"id": "CVE-2025-20377",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-mult-vuln-gK4TFXSn",
"source": "[email protected]"
}
]
}