[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f54IlzK4nknSZt8WbKDYVyN2nhFFoAeOGqWdY26GCCIo":3,"g5a-family:cisco\u002Funified_intelligence_center":169,"g5a-ex:cisco\u002Funified_intelligence_center@*":170},{"success":4,"data":5},true,{"product":6,"versions":59,"topVulnerabilitiesByEpss":80,"kevVulnerabilities":142,"seoMetadata":147,"meta":166},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":58},"cisco","unified_intelligence_center",20,21,1,"2024-02-21",[14,18,21,23,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"10.0\\(1\\)",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"10.6\\(1\\)",2,{"version":22,"cve_count":11,"kev_count":16,"has_kev":17},"11.0\\(1\\)es10",{"version":24,"cve_count":25,"kev_count":16,"has_kev":17},"11.5\\(1\\)",3,{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"11.6",{"version":29,"cve_count":11,"kev_count":16,"has_kev":17},"11.6\\(1\\)",{"version":31,"cve_count":11,"kev_count":16,"has_kev":17},"12.0\\(1\\)",{"version":33,"cve_count":11,"kev_count":16,"has_kev":17},"12.5\\(1\\)",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"12.5\\(1\\)_es02",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"12.5\\(1\\)_es03",{"version":39,"cve_count":11,"kev_count":11,"has_kev":4},"12.6\\(1\\)",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"12.6\\\\(1\\\\)",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"12.6\\(1\\)_es06",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"12.6\\(1\\)_es08",{"version":47,"cve_count":11,"kev_count":11,"has_kev":4},"12.6\\(2\\)",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"12.6\\(2\\)es02",{"version":51,"cve_count":25,"kev_count":16,"has_kev":17},"8.5.4",{"version":53,"cve_count":25,"kev_count":16,"has_kev":17},"9.0\\(2\\)",{"version":55,"cve_count":25,"kev_count":16,"has_kev":17},"9.1\\(1\\)",{"version":57,"cve_count":20,"kev_count":16,"has_kev":17},"9.5\\(1\\)","Unified Intelligence Center by Cisco is a technology product with 20 tracked versions and 21 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":11,"kev_count":16,"has_kev":17},{"version":24,"cve_count":25,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":11,"kev_count":16,"has_kev":17},{"version":31,"cve_count":11,"kev_count":16,"has_kev":17},{"version":33,"cve_count":11,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":11,"kev_count":11,"has_kev":4},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":11,"kev_count":11,"has_kev":4},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":25,"kev_count":16,"has_kev":17},{"version":53,"cve_count":25,"kev_count":16,"has_kev":17},{"version":55,"cve_count":25,"kev_count":16,"has_kev":17},{"version":57,"cve_count":20,"kev_count":16,"has_kev":17},[81,89,96,103,110,114,119,124,130,137],{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":86,"severity":87,"isKev":4,"epssScore":88},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10",10,"v3.1","Critical",0.99999,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":94,"severity":87,"isKev":17,"epssScore":95},"CVE-2017-12337","A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access to an affected device. The vulnerability occurs when a refresh upgrade (RU) or Prime Collaboration Deployment (PCD) migration is performed on an affected device. When a refresh upgrade or PCD migration is completed successfully, an engineering flag remains enabled and could allow root access to the device with a known password. If the vulnerable device is subsequently upgraded using the standard upgrade method to an Engineering Special Release, service update, or a new major release of the affected product, this vulnerability is remediated by that action. Note: Engineering Special Releases that are installed as COP files, as opposed to the standard upgrade method, do not remediate this vulnerability. An attacker who can access an affected device over SFTP while it is in a vulnerable state could gain root access to the device. This access could allow the attacker to compromise the affected system completely. Cisco Bug IDs: CSCvg22923, CSCvg55112, CSCvg55128, CSCvg55145, CSCvg58619, CSCvg64453, CSCvg64456, CSCvg64464, CSCvg64475, CSCvg68797.","2017-11-16",9.8,"v3.0",0.06435,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":100,"cvssVersion":94,"severity":101,"isKev":17,"epssScore":102},"CVE-2017-12254","A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a Document Object Model (DOM)-based cross-site scripting attack. The vulnerability is due to insufficient input validation of some parameters passed to the web server. An attacker could exploit this vulnerability by convincing the user to access a malicious link or by intercepting the user request and injecting the malicious code. An exploit could allow the attacker to execute arbitrary code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve76848, CSCve76856.","2017-09-21",6.1,"Medium",0.02336,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":107,"cvssVersion":94,"severity":108,"isKev":17,"epssScore":109},"CVE-2017-6779","Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM&P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823.","2018-06-07",7.5,"High",0.01984,{"cveId":111,"description":112,"publishedDate":99,"cvssScore":100,"cvssVersion":94,"severity":101,"isKev":17,"epssScore":113},"CVE-2017-12248","A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected software. An attacker could exploit this vulnerability by persuading a user to click a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve76835.",0.01714,{"cveId":115,"description":116,"publishedDate":117,"cvssScore":107,"cvssVersion":94,"severity":108,"isKev":17,"epssScore":118},"CVE-2016-6426","The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to create user accounts by visiting an unspecified web page, aka Bug IDs CSCuy75027 and CSCuy81653.","2016-10-05",0.01301,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":100,"cvssVersion":94,"severity":101,"isKev":17,"epssScore":123},"CVE-2017-6789","A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a Document Object Model (DOM)-based, environment or client-side cross-site scripting (XSS) attack. The vulnerability occurs because user-supplied data in the DOM input is not validated. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious DOM statements to the affected system. A successful exploit could allow the attacker to affect the integrity of the system by manipulating the database. Known Affected Releases 11.0(1)ES10. Cisco Bug IDs: CSCvf18325.","2017-09-07",0.01295,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"cvssVersion":94,"severity":101,"isKev":17,"epssScore":129},"CVE-2019-1860","A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive information between a user’s browser and Cisco Unified Intelligence Center. The vulnerability is due to the lack of gadget validation. An attacker could exploit this vulnerability by forcing a user to load a malicious gadget. A successful exploit could allow the attacker to obtain sensitive information, such as current user credentials, or manipulate data between the user’s browser and Cisco Unified Intelligence Center in the context of the malicious gadget.","2019-05-16",5.9,0.01257,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":134,"cvssVersion":135,"severity":101,"isKev":17,"epssScore":136},"CVE-2015-0740","Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826.","2015-05-20",6.8,"v2",0.01253,{"cveId":138,"description":139,"publishedDate":140,"cvssScore":100,"cvssVersion":94,"severity":101,"isKev":17,"epssScore":141},"CVE-2019-1670","A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of a user-supplied value. An attacker could exploit this vulnerability by convincing a user to click a specific link. A successful exploit could allow the attacker to submit arbitrary requests to the affected system via a web browser with the privileges of the user.","2019-02-07",0.01211,[143],{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"severity":87,"isKev":4,"epssScore":88,"cisaVulnName":144,"cisaDateAdded":84,"cisaShortDescription":145,"cisaRequiredAction":146},"Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"title":148,"metaDescription":149,"keywords":150,"structuredData":151},"Unified Intelligence Center by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Unified Intelligence Center by Cisco covering 20 versions with 21 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Unified Intelligence Center vulnerabilities, Unified Intelligence Center security, Unified Intelligence Center CVE, Cisco Unified Intelligence Center, Unified Intelligence Center threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Unified Intelligence Center KEV, Unified Intelligence Center exploited vulnerabilities",{"@context":152,"@type":153,"name":154,"description":149,"url":155,"manufacturer":156,"applicationCategory":160,"softwareVersion":161,"mainEntity":162},"https:\u002F\u002Fschema.org","SoftwareApplication","Unified Intelligence Center","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Funified_intelligence_center",{"@type":157,"name":158,"url":159},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","20 versions tracked",{"@type":163,"name":164,"description":165,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Unified Intelligence Center Security Vulnerabilities","Security vulnerabilities affecting Unified Intelligence Center by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":167,"apiVersion":168},"2026-10-19T01:32:52.276Z","3.0",[],{"rows":171,"total":11,"capped":17,"failed":16},[172],{"cveId":82,"name":144,"severity":87,"cvss":85,"added":84,"epss":88,"published":173,"ranges":174,"checked":4,"hits":176,"covers":17},"2021-12-10T10:15:09.143",[175],"before 12.6(1)",[]]