CVE-2025-20288

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
Cisco	Cisco Unified Contact Center Express	10.6(1); 10.5(1)SU1; 10.6(1)SU3; 12.0(1); 10.6(1)SU1; 11.0(1)SU1; 11.5(1)SU1; 10.5(1); 11.6(1); 11.6(2); 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)_SU03_ES01; 12.5(1)_SU03_ES02; 12.5(1)_SU02_ES03; 12.5(1)_SU02_ES04; 12.5(1)_SU02_ES02; 12.5(1)_SU01_ES02
Cisco	Cisco Unified Intelligence Center	11.6(1); 10.5(1); 11.0(1); 11.5(1); 12.0(1); 12.5(1); 11.0(2); 12.6(1); 12.5(1)SU; 12.6(1)_ET; 12.6(1)_ES05_ET; 11.0(3); 12.6(2); 12.6(2)_504_Issue_ET; 12.6.1_ExcelIssue_ET; 12.6(2)_Permalink_ET; 12.6.2_CSCwk19536_ET; 12.6.2_CSCwm96922_ET; 12.6.2_Amq_OOS_ET; 12.5(2)ET_CSCwi79933

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuis-ssrf-JSuDjeVVendor Advisory

Timeline

Published: Jul 16, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-202895.4Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker CVE-2025-20295.3A vulnerability was found in MicroDicom DICOM Viewer 2025.1 Build 3321. It has been classified as critical. Affected is an unknown function CVE-2025-202905.5A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches in sta CVE-2025-202916.1A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted Webex Meetings user to CVE-2025-202924.4A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the CVE-2025-202935.3A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) coul CVE-2025-202946.5Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote at CVE-2025-202956.0A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read CVE-2025-202965.4A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct CVE-2025-202975.4In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406 CVE-2025-202988.0In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version CVE-2025-20307.3A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform up to 20250224. It has been rated as critical. Aff