[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcf5w4NEGgxpPi9gfSt4rQu5S2ZTBsl9mKL90cQf6glE":3,"g5a-family:cisco\u002Funified_contact_center_enterprise":285,"g5a-ex:cisco\u002Funified_contact_center_enterprise@*":288},{"success":4,"data":5},true,{"product":6,"versions":132,"topVulnerabilitiesByEpss":190,"kevVulnerabilities":254,"seoMetadata":263,"meta":282},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":131},"cisco","unified_contact_center_enterprise",57,13,2,"2023-10-10",[14,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.0\\(1\\)",1,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"10.0\\(2\\)",{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},"10.5\\(1\\)",{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},"10.5\\(2\\)",{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},"10.6\\(1\\)",{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},"11.0\\(1\\)",{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},"11.5\\(1\\)",{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},"11.6\\(1\\)",{"version":34,"cve_count":16,"kev_count":16,"has_kev":4},"11.6\\(2\\)",{"version":36,"cve_count":16,"kev_count":16,"has_kev":4},"12.0\\(1\\)",{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},"12.0\\\\(1\\\\)",{"version":40,"cve_count":16,"kev_count":16,"has_kev":4},"12.5\\(1\\)",{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},"12.5\\\\(1\\\\)",{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},"12.5\\(1\\)_es02",{"version":46,"cve_count":16,"kev_count":16,"has_kev":4},"12.6\\(1\\)",{"version":48,"cve_count":17,"kev_count":17,"has_kev":18},"12.6\\\\(1\\\\)",{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},"12.6\\(1\\)_es06",{"version":52,"cve_count":16,"kev_count":16,"has_kev":4},"12.6\\(2\\)",{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},"12.6\\(2\\)es2",{"version":56,"cve_count":16,"kev_count":17,"has_kev":18},"4.6.2",{"version":58,"cve_count":16,"kev_count":17,"has_kev":18},"4.6\\(2\\)",{"version":60,"cve_count":16,"kev_count":17,"has_kev":18},"5.0",{"version":62,"cve_count":16,"kev_count":17,"has_kev":18},"5.0\\(0\\)",{"version":64,"cve_count":16,"kev_count":17,"has_kev":18},"6.0\\(0\\)",{"version":66,"cve_count":16,"kev_count":17,"has_kev":18},"7.0\\(0\\)",{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},"7.1",{"version":70,"cve_count":16,"kev_count":17,"has_kev":18},"7.1.0",{"version":72,"cve_count":16,"kev_count":17,"has_kev":18},"7.1\\(2\\)",{"version":74,"cve_count":16,"kev_count":17,"has_kev":18},"7.1\\(3\\)",{"version":76,"cve_count":16,"kev_count":17,"has_kev":18},"7.1\\(4\\)",{"version":78,"cve_count":11,"kev_count":17,"has_kev":18},"7.1\\(5\\)",{"version":80,"cve_count":16,"kev_count":17,"has_kev":18},"7.2\\(1\\)",{"version":82,"cve_count":16,"kev_count":17,"has_kev":18},"7.2\\(2\\)",{"version":84,"cve_count":16,"kev_count":17,"has_kev":18},"7.2\\(3\\)",{"version":86,"cve_count":16,"kev_count":17,"has_kev":18},"7.2\\(4\\)",{"version":88,"cve_count":16,"kev_count":17,"has_kev":18},"7.2\\(5\\)",{"version":90,"cve_count":16,"kev_count":17,"has_kev":18},"7.2\\(6\\)",{"version":92,"cve_count":16,"kev_count":17,"has_kev":18},"7.2\\(7\\)",{"version":94,"cve_count":16,"kev_count":17,"has_kev":18},"7.5\\(10\\)",{"version":96,"cve_count":16,"kev_count":17,"has_kev":18},"7.5\\(2\\)",{"version":98,"cve_count":16,"kev_count":17,"has_kev":18},"7.5\\(3\\)",{"version":100,"cve_count":16,"kev_count":17,"has_kev":18},"7.5\\(4\\)",{"version":102,"cve_count":16,"kev_count":17,"has_kev":18},"7.5\\(5\\)",{"version":104,"cve_count":16,"kev_count":17,"has_kev":18},"7.5\\(6\\)",{"version":106,"cve_count":16,"kev_count":17,"has_kev":18},"7.5\\(7\\)",{"version":108,"cve_count":16,"kev_count":17,"has_kev":18},"7.5\\(8\\)",{"version":110,"cve_count":16,"kev_count":17,"has_kev":18},"7.5\\(9\\)",{"version":112,"cve_count":16,"kev_count":17,"has_kev":18},"8.0\\(2\\)",{"version":114,"cve_count":16,"kev_count":17,"has_kev":18},"8.0\\(3\\)",{"version":116,"cve_count":16,"kev_count":17,"has_kev":18},"8.5\\(1\\)",{"version":118,"cve_count":16,"kev_count":17,"has_kev":18},"8.5\\(2\\)",{"version":120,"cve_count":16,"kev_count":17,"has_kev":18},"8.5\\(3\\)",{"version":122,"cve_count":16,"kev_count":17,"has_kev":18},"8.5\\(4\\)",{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},"9.0\\(1\\)",{"version":126,"cve_count":16,"kev_count":17,"has_kev":18},"9.0\\(2\\)",{"version":128,"cve_count":16,"kev_count":17,"has_kev":18},"9.0\\(3\\)",{"version":130,"cve_count":16,"kev_count":17,"has_kev":18},"9.0\\(4\\)","Unified Contact Center Enterprise by Cisco is a technology product with 57 tracked versions and 13 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},{"version":34,"cve_count":16,"kev_count":16,"has_kev":4},{"version":36,"cve_count":16,"kev_count":16,"has_kev":4},{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},{"version":40,"cve_count":16,"kev_count":16,"has_kev":4},{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},{"version":46,"cve_count":16,"kev_count":16,"has_kev":4},{"version":48,"cve_count":17,"kev_count":17,"has_kev":18},{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},{"version":52,"cve_count":16,"kev_count":16,"has_kev":4},{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},{"version":56,"cve_count":16,"kev_count":17,"has_kev":18},{"version":58,"cve_count":16,"kev_count":17,"has_kev":18},{"version":60,"cve_count":16,"kev_count":17,"has_kev":18},{"version":62,"cve_count":16,"kev_count":17,"has_kev":18},{"version":64,"cve_count":16,"kev_count":17,"has_kev":18},{"version":66,"cve_count":16,"kev_count":17,"has_kev":18},{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},{"version":70,"cve_count":16,"kev_count":17,"has_kev":18},{"version":72,"cve_count":16,"kev_count":17,"has_kev":18},{"version":74,"cve_count":16,"kev_count":17,"has_kev":18},{"version":76,"cve_count":16,"kev_count":17,"has_kev":18},{"version":78,"cve_count":11,"kev_count":17,"has_kev":18},{"version":80,"cve_count":16,"kev_count":17,"has_kev":18},{"version":82,"cve_count":16,"kev_count":17,"has_kev":18},{"version":84,"cve_count":16,"kev_count":17,"has_kev":18},{"version":86,"cve_count":16,"kev_count":17,"has_kev":18},{"version":88,"cve_count":16,"kev_count":17,"has_kev":18},{"version":90,"cve_count":16,"kev_count":17,"has_kev":18},{"version":92,"cve_count":16,"kev_count":17,"has_kev":18},{"version":94,"cve_count":16,"kev_count":17,"has_kev":18},{"version":96,"cve_count":16,"kev_count":17,"has_kev":18},{"version":98,"cve_count":16,"kev_count":17,"has_kev":18},{"version":100,"cve_count":16,"kev_count":17,"has_kev":18},{"version":102,"cve_count":16,"kev_count":17,"has_kev":18},{"version":104,"cve_count":16,"kev_count":17,"has_kev":18},{"version":106,"cve_count":16,"kev_count":17,"has_kev":18},{"version":108,"cve_count":16,"kev_count":17,"has_kev":18},{"version":110,"cve_count":16,"kev_count":17,"has_kev":18},{"version":112,"cve_count":16,"kev_count":17,"has_kev":18},{"version":114,"cve_count":16,"kev_count":17,"has_kev":18},{"version":116,"cve_count":16,"kev_count":17,"has_kev":18},{"version":118,"cve_count":16,"kev_count":17,"has_kev":18},{"version":120,"cve_count":16,"kev_count":17,"has_kev":18},{"version":122,"cve_count":16,"kev_count":17,"has_kev":18},{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},{"version":126,"cve_count":16,"kev_count":17,"has_kev":18},{"version":128,"cve_count":16,"kev_count":17,"has_kev":18},{"version":130,"cve_count":16,"kev_count":17,"has_kev":18},[191,198,204,212,219,225,231,237,243,249],{"cveId":192,"description":193,"publishedDate":12,"cvssScore":194,"cvssVersion":195,"severity":196,"isKev":4,"epssScore":197},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.",7.5,"v3.1","High",0.99999,{"cveId":199,"description":200,"publishedDate":201,"cvssScore":202,"cvssVersion":195,"severity":203,"isKev":4,"epssScore":197},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10",10,"Critical",{"cveId":205,"description":206,"publishedDate":207,"cvssScore":208,"cvssVersion":209,"severity":210,"isKev":18,"epssScore":211},"CVE-2014-3323","Directory traversal vulnerability in Cisco Unified Contact Center Enterprise allows remote authenticated users to read arbitrary web-root files via a crafted URL, aka Bug ID CSCun25262.","2014-07-18",4,"v2","Medium",0.02309,{"cveId":213,"description":214,"publishedDate":215,"cvssScore":216,"cvssVersion":217,"severity":210,"isKev":18,"epssScore":218},"CVE-2017-6626","A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allow an unauthenticated, remote attacker to retrieve information from agents using the Finesse Desktop. The vulnerability is due to the existence of a user account that has an undocumented, hard-coded password. An attacker could exploit this vulnerability by using the hard-coded credentials to subscribe to the Finesse Notification Service, which would allow the attacker to receive notifications when an agent signs in or out of the Finesse Desktop, when information about an agent changes, or when an agent's state changes. Cisco Bug IDs: CSCvc08314.","2017-05-03",5.3,"v3.0",0.02301,{"cveId":220,"description":221,"publishedDate":222,"cvssScore":223,"cvssVersion":209,"severity":203,"isKev":18,"epssScore":224},"CVE-2007-5539","Unspecified vulnerability in Cisco Unified Intelligent Contact Management Enterprise (ICME), Unified ICM Hosted (ICMH), Unified Contact Center Enterprise (UCCE), Unified Contact Center Hosted (UCCH), and System Unified Contact Center Enterprise (SUCCE) 7.1(5) allows remote authenticated users to gain privileges, and read reports or change the SUCCE configuration, via certain web interfaces, aka CSCsj55686.","2007-10-18",9,0.02098,{"cveId":226,"description":227,"publishedDate":228,"cvssScore":229,"cvssVersion":209,"severity":210,"isKev":18,"epssScore":230},"CVE-2007-0198","The JTapi Gateway process in Cisco Unified Contact Center Enterprise, Unified Contact Center Hosted, IP Contact Center Enterprise, and Cisco IP Contact Center Hosted 5.0 through 7.1 allows remote attackers to cause a denial of service (repeated process restart) via a certain TCP session on the JTapi server port.","2007-01-11",5,0.01719,{"cveId":232,"description":233,"publishedDate":234,"cvssScore":235,"cvssVersion":195,"severity":210,"isKev":18,"epssScore":236},"CVE-2020-3163","A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing inbound Live Data traffic. An attacker could exploit this vulnerability by sending multiple crafted Live Data packets to an affected device. A successful exploit could cause the affected device to run out of buffer resources, which could result in a stack overflow and cause the affected device to reload, resulting in a DoS condition. Note: The Live Data port in Cisco Unified Contact Center Enterprise devices allows only a single TCP connection. To exploit this vulnerability, an attacker would have to send crafted packets to an affected device before a legitimate Live Data client establishes a connection.","2020-02-19",5.9,0.00895,{"cveId":238,"description":239,"publishedDate":240,"cvssScore":241,"cvssVersion":195,"severity":210,"isKev":18,"epssScore":242},"CVE-2021-1395","A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.","2021-06-16",4.7,0.00813,{"cveId":244,"description":245,"publishedDate":246,"cvssScore":247,"cvssVersion":217,"severity":210,"isKev":18,"epssScore":248},"CVE-2016-1439","Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650.","2016-06-23",6.1,0.00765,{"cveId":250,"description":251,"publishedDate":252,"cvssScore":208,"cvssVersion":209,"severity":210,"isKev":18,"epssScore":253},"CVE-2014-2180","The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133.","2014-04-29",0.00764,[255,259],{"cveId":192,"description":193,"publishedDate":12,"cvssScore":194,"severity":196,"isKev":4,"epssScore":197,"cisaVulnName":256,"cisaDateAdded":12,"cisaShortDescription":257,"cisaRequiredAction":258},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":199,"description":200,"publishedDate":201,"cvssScore":202,"severity":203,"isKev":4,"epssScore":197,"cisaVulnName":260,"cisaDateAdded":201,"cisaShortDescription":261,"cisaRequiredAction":262},"Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"title":264,"metaDescription":265,"keywords":266,"structuredData":267},"Unified Contact Center Enterprise by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Unified Contact Center Enterprise by Cisco covering 57 versions with 13 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Unified Contact Center Enterprise vulnerabilities, Unified Contact Center Enterprise security, Unified Contact Center Enterprise CVE, Cisco Unified Contact Center Enterprise, Unified Contact Center Enterprise threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Unified Contact Center Enterprise KEV, Unified Contact Center Enterprise exploited vulnerabilities",{"@context":268,"@type":269,"name":270,"description":265,"url":271,"manufacturer":272,"applicationCategory":276,"softwareVersion":277,"mainEntity":278},"https:\u002F\u002Fschema.org","SoftwareApplication","Unified Contact Center Enterprise","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Funified_contact_center_enterprise",{"@type":273,"name":274,"url":275},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","57 versions tracked",{"@type":279,"name":280,"description":281,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Unified Contact Center Enterprise Security Vulnerabilities","Security vulnerabilities affecting Unified Contact Center Enterprise by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":283,"apiVersion":284},"2026-10-19T00:10:33.180Z","3.0",[286],{"product":287,"cves":16},"unified_contact_center_enterprise_-_live_data_server",{"rows":289,"total":11,"capped":18,"failed":17},[290,294],{"cveId":192,"name":256,"severity":196,"cvss":194,"added":12,"epss":197,"published":291,"ranges":292,"checked":4,"hits":293,"covers":18},"2023-10-10T14:15:10.883",[],[],{"cveId":199,"name":260,"severity":203,"cvss":202,"added":201,"epss":197,"published":295,"ranges":296,"checked":4,"hits":302,"covers":18},"2021-12-10T10:15:09.143",[297,298,299,300,301],"before 11.6(2)","12.0(1)","12.5(1)","12.6(1)","12.6(2)",[]]