CVE-2025-20273

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability in the web-based management interface of Cisco Unified Intelligent Contact Management Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Cisco	Cisco Unified Intelligent Contact Management Enterprise	10.5(2)_ES15; 10.5(1)_ES20; 10.5(2)_ES17; 10.5(1)_ES21; 10.5(2)_ES40; 10.5(2)_ES35; 10.0(2)_ES22; 10.5(2)_ES31; 10.5(2)_ES39; 10.0(2)_ES23; 10.0(2)_ES28; 11.0(2)_ES6; 10.5(2)_ES24; 10.5(2)_ES26; 10.5(2)_ES18; 11.0(2)_ES1; 10.5(2)_ES27; 10.0(2)_ES27; 11.0(2)_ES7; 10.0(2)_ES25

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-icm-xss-cfcqhXAgVendor Advisory

Timeline

Published: Jun 4, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-202748.8A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to CVE-2025-202757.8A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated atta CVE-2025-202767.2A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrar CVE-2025-202776.7A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary CVE-2025-202786.7A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitra CVE-2025-202794.8A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to conduct a stored CVE-2025-20285.3Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs CVE-2025-202804.8A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure co CVE-2025-2028110.0A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code o CVE-2025-2028210.0A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files CVE-2025-202837.2A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on CVE-2025-202847.2A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on