Cisco Unified Intelligent Contact Management Enterprise Cross-Site Scripting vulnerability

6.1 CVSS

Vulnerability Description

A vulnerability in the web-based management interface of Cisco Unified Intelligent Contact Management Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-20273

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-icm-xss-cfcqhXAg

More from Cisco

View All →

CVE-2025-20393

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

Critical 10

CVE-2025-20377

Cisco Unified Intelligence Center API Information Disclosure Vulnerability

Medium 4.3

CVE-2025-20376

Cisco Unified Contact Center Express Remote Code Execution Vulnerability

Medium 6.5

CVE-2025-20375

Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability

Medium 6.5

CVE-2025-20374

Cisco Unified Contact Center Express Arbitrary File Download Vulnerability

Medium 4.9

Affected Vendor

Cisco

View all reports →

Affected Software

Cisco Unified Intelligent Contact Management Enterprise

Vulnerable Versions:

10.5(2)_ES15, 10.5(1)_ES20, 10.5(2)_ES17, 10.5(1)_ES21, 10.5(2)_ES40, 10.5(2)_ES35, 10.0(2)_ES22, 10.5(2)_ES31, 10.5(2)_ES39, 10.0(2)_ES23, 10.0(2)_ES28, 11.0(2)_ES6, 10.5(2)_ES24, 10.5(2)_ES26, 10.5(2)_ES18, 11.0(2)_ES1, 10.5(2)_ES27, 10.0(2)_ES27, 11.0(2)_ES7, 10.0(2)_ES25, 10.0(2)_ES24, 10.0(2)_ES19, 11.0(2)_ES2, 10.5(1)_ES23, 10.5(2)_ES16, 10.5(1)_ES24, 11.0(2)_ES3, 10.5(2)_ES32, 11.0(2)_ES4, 10.5(2)_ES33, 10.5(2)_ES30, 10.0(2)_ES30, 11.0(2), 11.0(1)_ES4, 10.0(2)_ES29, 10.5(2)_ES36, 11.0(2)_ES5, 10.0(2)_ES31, 10.5(2)_ES25, 10.5(2)_ES23, 10.5(2)_ES41, 10.5(1)_ES26, 11.0(1)_ES3, 10.0(2)_ES17, 10.0(2)_ES20, 11.0(2)_ES8, 10.5(2)_ES22, 10.5(2)_ES34, 10.5(2)_ES38, 10.5(2)_ES37, 10.0(2)_ES26, 10.5(1)_ES2, 10.5(1)_ES5, 10.5(1)_ES6, 10.5(1), 10.0(1)_ES13, 10.0(2), 10.0(1)_ES9, 10.0(1)_ES10, 10.0(1)_ES12, 10.5(1)_ES8, 10.5(1)_ES12, 10.5(1)_ES11, 10.5(1)_ES14, 10.0(2)_ES3, 10.0(1)_ES15, 10.5(2)_ES7, 10.5(1)_ES10, 10.0(2)_ES9, 10.5(2)_ES3, 10.5(2), 10.0(2)_ES7, 10.0(2)_ES8, 10.0(2)_ES10, 10.0(2)_ES2, 10.0(1)_ES16, 10.0(2)_ES6, 10.5(2)_ES10, 10.5(1)_ES16, 10.5(1)_ES9, 10.0(2)_ES14, 10.5(2)_ES9, 10.0(2)_ES11, 10.5(2)_ES4, 11.0(1), 10.5(2)_ES13, 10.5(1)_ES18, 10.5(2)_ES6, 10.0(2)_ES15, 10.5(2)_ES5, 10.0(2)_ES12, 10.5(2)_ES14, 10.5(2)_ES8, 10.0(2)_ES5, 12.6(1)_ES34, 12.5(2), 12.5(1)_ET125, 12.5(1)_ES143, 12.5(2)_ES19, 12.5(2)_ES6, 12.5(1)_ES118, 12.0(1)_ES104, 12.6(1)_ES41, 12.5(1)_ES138, 12.5(1)_ES119, 12.6(1)_ES39, 12.5(1)_ES135, 12.5(2)_ES12, 12.0(1)_ET105, 12.6(1)_ES43, 12.6(1)_ES45, 12.5(2)_ES8, 12.5(2)_ES15, 12.5(1)_ET142, 12.6(1)_ET52, 11.6(2)_ES87, 12.6(1)_ET33, 12.5(1)_ET131, 12.5(2)_ES2, 12.5(2)_ES3, 12.5(1)_ET133, 12.5(1)_ES123, 12.5(1)_ET134, 12.6(1)_ES53, 12.5(2)_ES18, 12.5(1)_ES122, 12.5(2)_ES5, 12.5(1)_ES130, 12.6(1)_ES40, 12.5(2)_ES9, 12.5(1)_ET141, 12.6(1)_ES55, 12.6(1)_ES56, 12.0(1)_ET106, 12.6(1)_ES35, 12.5(1)_ES132, 12.6(1)_ES38, 12.5(1)_ES124, 12.6(1)_ES37, 12.6(1)_ES42, 12.5(1)_ES136, 12.6(1)_ET49, 12.5(1)_ES140, 12.5(1)_ET121, 12.5(1)_ET120, 12.5(1)_ES128, 12.5(2)_ES17, 12.6(1)_ES36, 12.6(1)_ES57, 12.0(1)_ET103, 12.5(2)_ES7, 12.5(2)_ES13, 12.5(1)_ES137, 12.5(2)_ES16, 12.5(1)_ES139, 12.6(1)_ES46, 12.6(1)_ES54, 12.5(1)_ES129, 12.6(1)_ES50, 12.6(1)_ES44, 12.5(2)_ES10, 12.5(2)_ES14, 12.6(1)_ES47, 12.5(1)_ES126, 12.5(1)_ET127, 12.5(2)_ES4, 12.6(1)_ES48, 12.6(1)_ET51, 12.5(1)_ES105, 12.5(1)_ES106, 12.5(1)_ES88, 11.6(2)_ES84, 12.0(1)_ES94, 12.5(1)_ES108, 12.5(1)_ET116, 12.0(1)_ES100, 12.6(1)_ES16, 12.6(1)_ET24, 12.0(1)_ES95, 12.5(1)_ES113, 12.5(1)_ET95, 12.0(1)_ES87, 11.6(2)_ES81, 12.6(1)_ES31, 12.5(1)_ET92, 12.0(1)_ES88, 12.6(1)_ES19, 12.0(1)_ES85, 12.6(1)_ES25, 12.0(1)_ET84, 12.6(1)_ES18, 12.6(1)_ES20, 12.0(1)_ES93, 12.0(1)_ES102, 12.5(1)_ES117, 12.5(1)_ES94, 12.5(1)_ES107, 12.5(1)_ES111, 12.5(1)_ES93, 12.5(1)_ES101, 12.0(1)_ES91, 12.5(1)_ES99, 11.6(2)_ES85, 12.6(1)_ES17, 12.0(1)_ES92, 12.5(1)_ES115, 12.6(1)_ES27, 12.6(1)_ES28, 12.0(1)_ES83, 12.5(1)_ES87, 12.5(1)_ES90, 12.0(1)_ET99, 11.6(2)_ES80, 12.5(1)_ES100, 12.6(1)_ES21, 12.5(1)_ES86, 12.0(1)_ES101, 11.6(2)_ES86, 12.6(1)_ES22, 12.5(1)_ES109, 12.5(1)_ES110, 12.0(1)_ET98, 12.0(1)_ES97, 12.0(1)_ES89, 12.0(1)_ES90, 12.6(1)_ES32, 12.0(1)_ES86, 12.5(1)_ES104, 12.5(1)_ES103, 12.0(1)_ES96, 12.5(1)_ES91, 12.5(1)_ET89, 12.5(1)_ES112, 12.6(1)_ES30, 12.5(1)_ES47, 12.5(1)_ES60, 12.5(1)_ES66, 12.5(1)_ES67, 12.0(1)_ES78, 12.5(1)_ES77, 12.5(1)_ES76, 12.6(1)_ES9, 12.5(1)_ES55, 11.6(1)_ET71, 11.6(2)_ES72, 12.5(1)_ES68, 12.6(1), 12.0(1)_ES74, 11.6(2)_ES78, 11.6(2)_ES76, 12.5(1)_ES83, 12.5(1)_ET84, 12.6(1)_ES6, 11.6(2)_ES75, 12.5(1)_ES71, 12.0(1)_ET72, 12.5(1)_ES64, 12.5(1)_ES63, 12.5(1)_ES62, 12.5(1)_ES65, 12.0(1)_ES73, 12.5(1)_ES59, 12.6(1)_ES13, 12.5(1)_ES61, 11.6(2)_ES68, 12.0(1)_ES70, 12.5(1)_ES49, 12.6(1)_ES8, 12.5(1)_ES51, 12.5(1)_ES75, 12.5(1)_ES74, 12.0(1)_ES79, 12.5(1)_ES85, 12.0(1)_ES76, 11.6(2)_ES74, 12.0(1)_ES77, 12.5(1)_ES50, 12.6(1)_ES15, 12.0(1)_ES82, 11.6(2)_ES77, 12.5(1)_ES46, 11.6(2)_ES69, 11.6(2)_ES70, 12.5(1)_ES58, 11.6(2)_ES71, 12.5(1)_ES70, 12.5(1)_ES73, 12.5(1)_ES69, 12.5(1)_ES72, 12.5(1)_ES80, 11.6(2)_ES73, 12.6(1)_ES11, 12.5(1)_ES81, 10.0(1), 10.0(1)_ES1, 11.6(2)_ES59, 12.5(1)_ES16, 12.0(1)_ES53, 11.6(2)_ES56, 12.0(1)_ES57, 11.6(2)_ES58, 12.0(1)_ES51, 12.0(1)_ES65, 12.5(1)_ES30, 12.5(1)_ES32, 12.0(1)_ES69, 12.5(1)_ES42, 12.5(1)_ET41, 12.5(1)_ES45, 11.6(2)_ES54, 12.5(1)_ES19, 12.5(1)_ES27, 12.5(1)_ES18, 12.5(1)_ES20, 12.5(1)_ES15, 11.6(2)_ES61, 11.6(2)_ES62, 12.0(1)_ES64, 12.0(1)_ES63, 12.0(1)_ES54, 12.0(1)_ET61, 11.6(2)_ES66, 12.5(1)_ES17, 12.5(1)_ES21, 12.5(1)_ES35, 12.0(1)_ES60, 12.5(1)_ES28, 12.5(1)_ES37, 11.6(2)_ES65, 12.5(1)_ES38, 12.5(1)_ES40, 12.0(1)_ES68, 11.6(2)_ES67, 12.5(1)_ES44, 12.5(1)_ES43, 11.6(2)_ES55, 12.0(1)_ES55, 12.5(1)_ES24, 12.0(1)_ES58, 12.5(1)_ET29, 12.5(1)_ES26, 12.5(1)_ES13, 11.6(2)_ES53, 11.6(2)_ET57, 12.0(1)_ES67, 12.0(1)_ES66, 11.6(2)_ES52, 11.0(3)_ET9, 12.5(1)_ES31, 12.5(1)_ES39, 12.0(1)_ES52, 11.6(2)_ES51, 11.6(2)_ES64, 12.5(1)_ES22, 11.6(2)_ES60, 12.5(1)_ES25, 12.5(1)_ES34, 11.6(2)_ES63, 12.0(1)_ES62, 12.5(1)_ES33, 11.6(2)_ES27, 12.0(1)_ES48, 12.5(1)_ES7, 12.0(1)_ET36, 12.0(1)_ES49, 12.5(1)_ES2, 12.5(1), 11.6(2)_ES48, 12.0(1)_ES37, 12.5(1)_ES11, 11.6(2)_ES47, 11.6(2)_ES45, 11.6(2)_ES23, 11.6(2)_ES26, 11.6(2)_ES24, 11.6(2)_ET22, 11.6(2)_ET29, 12.0(1)_ES41, 11.6(2)_ES35, 12.0(1)_ES42, 12.0(1)_ES43, 11.6(2)_ES37, 11.6(2)_ES28, 11.6(2)_ET40, 12.0(1)_ES44, 12.5(1)_ES4, 12.5(1)_ES5, 11.6(2)_ES38, 12.0(1)_ES46, 11.6(2)_ES39, 11.6(2)_ES42, 11.6(2)_ES41, 11.6(2)_ES43, 12.0(1)_ES50, 12.5(1)_ES9, 11.6(2)_ES30, 11.6(2)_ES31, 10.5(3)_ET55, 11.0(3)_ET8, 11.6(2)_ES32, 12.0(1)_ES40, 11.6(2)_ES33, 12.5(1)_ES12, 11.6(2)_ES44, 12.0(1)_ES18, 11.6(2)_ES19, 11.6(1)_ET69, 11.6(2), 11.5(1)_ES50, 11.6(2)_ES3, 11.6(2)_ES9, 11.6(1)_ET63, 12.0(1)_ES21, 11.6(2)_ES12, 11.0(3)_ES6, 11.5(1)_ES49, 12.0(1)_ES13, 11.6(2)_ES7, 11.6(2)_ET18, 12.0.1a, 11.6(2)_ES14, 11.6(2)_ES16, 11.6(2)_ES4, 11.6(2)_ES21, 11.5(1)_ES51, 12.0(1)_ES20, 11.6(2)_ET5, 11.6(2)_ES8, 11.6(1)_ES65, 12.0(1)_ES15, 12.0(1)_ES27, 11.6(2)_ES20, 10.0(2)_ET49, 11.6(2)_ET10, 12.0(1)_ES26, 12.0(1)_ES35, 12.0(1)_ES34, 12.0(1)_ES12, 11.6(2)_ES2, 11.6(2)_ES13, 11.6(2)_ES15, 12.0(1)_ES33, 11.6(2)_ES1, 11.5(1)_ES52, 12.0(1)_ES28, 12.0(1)_ES29, 12.0(1)_ES30, 11.6(2)_ES11, 11.6(1)_ES66, 10.5(3)_ES54, 11.6(2)_ET17, 12.0(1)_ES11, 11.0(3)_ES7, 11.6(1)_ES27, 11.6(1)_ES30, 11.6(1)_ES59, 11.6(1)_ES21, 11.5(1)_ES40, 11.6(1)_ES25, 11.6(1)_ES31, 11.6(1)_ES42, 11.5(1)_ES44, 11.6(1)_ES53, 11.5(1)_ES35, 11.5(1)_ES37, 11.6(1)_ES36, 10.5(3)_ET51, 11.6(1)_ES61, 11.6(1)_ES23, 11.5(1)_ES36, 11.6(1)_ES44, 10.5(3)_ES39, 11.6(1)_ES19, 11.6(1)_ES49, 11.0(3)_ES2, 11.5(1)_ES33, 10.5(3)_ES38, 10.5(3)_ES50, 12.0(1)_ES7, 11.6(1)_ES39, 10.5(3)_ES49, 11.0(3)_ES3, 11.6(1)_ES48, 11.5(1)_ES42, 11.0(3)_ES5, 11.5(1)_ES46, 11.6(1)_ES46, 11.6(1)_ES47, 11.6(1)_ES50, 11.6(1)_ET54, 11.6(1)_ES52, 11.6(1)_ES51, 11.0(3)_ES4, 11.6(1)_ES56, 11.6(1)_ES20, 10.5(3)_ES44, 11.5(1)_ES47, 11.6(1)_ES58, 11.5(1)_ES41, 11.6(1)_ES55, 11.6(1)_ES28, 10.5(3)_ES41, 12.0(1), 11.6(1)_ES40, 10.5(3)_ES42, 11.6(1)_ET60, 11.6(1)_ES45, 10.5(3)_ES43, 11.6(1)_ES41, 10.5(3)_ES48, 11.6(1)_ES32, 11.6(1)_ES34, 11.6(1)_ES62, 11.6(1)_ES24, 11.6(1)_ES38, 11.5(1)_ES34, 11.6(1)_ES26, 11.5(1)_ES38, 11.6(1)_ES35, 11.6(1)_ES22, 10.5(3)_ES47, 12.0(1)_ES6, 11.6(1)_ES33, 11.5(1)_ES39, 10.5(3)_ES45, 11.6(1), 10.5(3)_ES23, 11.5(1)_ES29, 10.5(3)_ES36, 11.5(1)_ES28, 10.5(3)_ES34, 11.6(1)_ES3, 11.5(1)_ES19, 10.5(1)_ES28, 10.0(2)_ES42, 11.6(1)_ES7, 11.5(1)_ES26, 11.6(1)_ES10, 11.6(1)_ES11, 11.5(1)_ES16, 11.5(1)_ES18, 10.0(2)_ES41, 10.5(3)_ES15, 10.5(3)_ES17, 11.5(1)_ES17, 11.5(1)_ES31, 11.6(1)_ES14, 11.6(1)_ES17, 11.5(1)_ES15, 11.0(2)_ES45, 11.5(1)_ES20, 10.5(3)_ET22, 10.5(3)_ES27, 10.5(3)_ES32, 11.5(1)_ES23, 11.6(1)_ES4, 11.0(3), 11.6(1)_ES18, 10.0(2)_ES43, 10.5(3)_ES31, 11.6(1)_ES5, 11.0(2)_ES42, 11.5(1)_ES21, 11.0(2)_ES44, 11.0(2)_ES38, 10.5(3)_ES20, 11.6(1)_ES2, 11.0(2)_ES40, 10.5(3)_ES19, 10.0(2)_ES46, 10.0(2)_ES47, 10.5(3)_ES29, 11.6(1)_ES9, 10.0(2)_ES45, 10.5(3)_ET25, 11.6(1)_ES12, 10.5(3)_ES33, 11.5(1)_ES30, 11.5(1)_ES25, 10.5(3)_ES30, 10.5(3)_ES24, 10.5(3)_ES35, 11.0(2)_ES9, 10.5(2)_ES52, 11.0(2)_ES37, 10.0(2)_ES39, 11.0(2)_ES27, 10.5(2)_ES55, 11.5(1)_ES7, 11.0(1)_ES6, 10.5(2)_ES48, 11.0(2)_ES33, 10.0(2)_ES37, 11.0(2)_ES10, 10.0(2)_ES36, 11.0(2)_ES24, 10.5(3)_ES1, 10.5(3)_ES12, 11.5(1)_ES13, 10.5(2)_ES46, 10.5(2)_ES49, 11.0(2)_ES31, 11.0(2)_ES35, 10.5(3)_ES10, 11.0(1)_ES5, 10.0(2)_ES33, 10.5(2)_ES47, 10.5(3)_ES5, 11.0(2)_ES20, 10.5(3)_ES6, 10.5(3)_ES13, 11.0(2)_ES12, 10.5(2)_ES42, 11.0(2)_ES15, 10.5(3), 11.0(2)_ES34, 11.0(2)_ES29, 10.5(2)_ES44, 11.5(1)_ES8, 10.0(2)_ES32, 10.5(2)_ES43, 10.5(2)_ES45, 11.0(2)_ES16, 11.0(2)_ES18, 11.5(1)_ES4, 10.5(3)_ES4, 11.5(1)_ES5, 11.0(2)_ES28, 11.5(1)_ES10, 10.0(2)_ES38, 11.5(1)_ES11, 11.5(1)_ES12, 10.5(3)_ES3, 10.0(2)_ES40, 11.0(2)_ES13, 10.5(3)_ES14, 10.5(3)_ES8, 11.5(1), 11.0(1)_ES9, 10.0(2)_ES35, 11.0(2)_ES23, 11.0(1)_ES10, 11.0(1)_ES8, 11.0(2)_ES11, 11.0(2)_ES25, 10.5(2)_ES53, 10.5(1)_ES27, 12.5(2)_ES20, 12.5(2)_ES21, 12.6(1)_ES58, 12.5(2)_ES22, 12.6(1)_ES59, 12.5(2)_ES23, 12.5(1)_ES144, 12.5(2)_ES24, 12.5(2)_ES25, 12.6(1)_ES60, 12.5(1)_ET145, 12.5(2)_ES26, 11.6(2)_ES88, 12.6(2), 12.6(1)_ES61, 12.5(1)_ET146, 12.6(1)_ES63, 12.6(1)_ES62, 12.5(2)_ES27, 12.5(1)_ES147, 12.5(2)_ES29, 12.6(1)_ES65, 12.0(1)_ET107, 12.6(2)_ES7, 12.6(1)_ES66, 12.5(2)_ES30, 12.6(2)_ES9, 12.5(2)_ES28, 12.5(2)_ES31, 12.5(2)_ES32, 12.6(1)_ES67, 12.6(2)_ES10, 12.5(2)_ES33, 12.6(1)_ES69, 12.6(2)_ES13, 12.6(2)_ES12, 12.6(2)_ES4, 12.6(2)_ES14, 12.6(1)_ET70, 12.6(2)_ET15, 12.5(2)_ES35, 12.6(2)_ES16, 12.6(2)_ES17, 12.6(2)_ES8, 12.6(2)_ET18, 12.6(2)_ES19, 12.6(2)_ET21, 12.6(2)_ET20, 12.5(2)_ES36, 12.6(2)_ES23, 12.6(2)_ES26, 12.6(1)_ES71, 12.6(2)_ES27, 12.5(2)_ET37, 12.6(2)_ET28, 12.6(2)_ET30, 12.6(2)_ES25, 12.6(2)_ES29, 12.6(2)_ET31, 12.6(2)_ES32, 12.6(2)_ES33, 12.6(2)_ET34, 12.5(2)_ES38, 12.6(2)_ET39, 12.6(1)_ES72, 12.6(2)_ET40, 12.6(1)_ET73, 12.5(2)_ES39, 12.6(2)_ES35, 12.6(2)_ES36, 12.6(2)_ES37, 12.6(2)_ES38, 12.5(2)_ES41, 12.6(2)_ET41, 12.6(2)_ET42, 12.6(2)_ES44, 12.6(2)_ES45, 12.6(2)_ES46, 12.6(2)_ES43, 12.6(2)_ET47, 12.6(2)_ES51, 12.5(2)_ES42, 12.6(2)_ET57, 12.6(2)_ET52, 12.6(2)_ET59, 12.6(2)_ES55, 12.6(2)_ES56, 12.6(2)_ES53, 12.6(2)_ES54, 12.5(2)_ES43, 12.5(2)_ES44, 12.6(1)_ET74, 12.5(2)_ES45, 12.6(2)_ET62, 12.6(2)_ET64, 12.6(2)_ET65, 12.6(1)_ET75, 12.6(1)_ET76, 12.6(2)_ET66, 12.6(2)_ET72, 12.6(2)_ET73, 12.6(2)_ET74, 15.0(1)