CVE-2026-20314
Full vulnerability record from the local CVENow database.
Description
A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.
Severity
MEDIUM
CVSS score
5.0
(v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-08-19 17:18:39.677000
Last modified
2026-10-26 11:10:00.157000
View original CVE JSON
{
"id": "CVE-2026-20314",
"sourceIdentifier": "[email protected]",
"published": "2026-08-19T17:18:39.677",
"lastModified": "2026-10-26T11:10:00.157",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device.\r\n\r\nThis vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. "
},
{
"lang": "es",
"value": "Una vulnerabilidad en Cisco Packaged Contact Center Enterprise (Packaged CCE) y Cisco Unified Contact Center Enterprise (Unified CCE) podría permitir a un atacante autenticado y remoto realizar ataques de falsificación de petición del lado del servidor (SSRF) a través de un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validación de entrada incorrecta para peticiones HTTP específicas. Un atacante podría explotar esta vulnerabilidad enviando una petición HTTP manipulada a un dispositivo afectado. Un exploit exitoso podría permitir al atacante enviar peticiones de red arbitrarias que se originen desde el dispositivo afectado. Para explotar esta vulnerabilidad, el atacante debe tener credenciales de usuario válidas en el dispositivo afectado."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Packaged Contact Center Enterprise",
"defaultStatus": "unknown",
"versions": [
{
"version": "12.5(1)",
"status": "affected"
},
{
"version": "11.0(1)",
"status": "affected"
},
{
"version": "12.0(1)",
"status": "affected"
},
{
"version": "11.0(2)",
"status": "affected"
},
{
"version": "11.5(1)",
"status": "affected"
},
{
"version": "10.5(1)",
"status": "affected"
},
{
"version": "10.5(2)",
"status": "affected"
},
{
"version": "11.6(2)",
"status": "affected"
},
{
"version": "10.5(1)_ES7",
"status": "affected"
},
{
"version": "11.6(1)",
"status": "affected"
},
{
"version": "10.5(2)_ES8",
"status": "affected"
},
{
"version": "12.5(2)",
"status": "affected"
},
{
"version": "12.6(2)",
"status": "affected"
},
{
"version": "15.0(1)",
"status": "affected"
}
]
},
{
"vendor": "Cisco",
"product": "Cisco Unified Contact Center Enterprise",
"defaultStatus": "unknown",
"versions": [
{
"version": "12.6(1)ES3",
"status": "affected"
},
{
"version": "12.6(1)ES1",
"status": "affected"
},
{
"version": "12.6(1)",
"status": "affected"
},
{
"version": "12.6(1)ES2",
"status": "affected"
},
{
"version": "12.6(1)SecurityPatch",
"status": "affected"
},
{
"version": "12.5(1)ES1",
"status": "affected"
},
{
"version": "12.5(1)",
"status": "affected"
},
{
"version": "12.6(1)ES4",
"status": "affected"
},
{
"version": "11.0(1)",
"status": "affected"
},
{
"version": "10.5(1)",
"status": "affected"
},
{
"version": "12.0(1)",
"status": "affected"
},
{
"version": "10.5",
"status": "affected"
},
{
"version": "11.0",
"status": "affected"
},
{
"version": "11.5",
"status": "affected"
},
{
"version": "12.6(2)",
"status": "affected"
},
{
"version": "12.6(2)ES1",
"status": "affected"
},
{
"version": "12.6(2)ES2",
"status": "affected"
},
{
"version": "15.0(1)",
"status": "affected"
},
{
"version": "12.6(2)ES3",
"status": "affected"
},
{
"version": "15.0(1)ET01",
"status": "affected"
},
{
"version": "15.0(1)_SP1",
"status": "affected"
},
{
"version": "15.0(1)ES202508",
"status": "affected"
},
{
"version": "15.0(1)ES202511",
"status": "affected"
},
{
"version": "12.6(2)ES4",
"status": "affected"
},
{
"version": "15.0(1)SU1",
"status": "affected"
},
{
"version": "15.0(1)ES202603",
"status": "affected"
},
{
"version": "12.6(2)ES5",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 1.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-19T19:33:30.001030Z",
"id": "CVE-2026-20314",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-ssrf-TghHxD",
"source": "[email protected]"
}
]
}