{"schema_version":1,"title":"Cisco Unified Contact Center Express vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Cisco Unified Contact Center Express: 0 in the last 7 days and 0 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-20117, was published on 11 March 2026.","url":"https://junglewise.ai/threats/technologies/unified-contact-center-express","json_url":"https://junglewise.ai/threats/technologies/unified-contact-center-express.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/unified-contact-center-express","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":0,"all_time":6,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":1},"latest":[{"cve":"CVE-2026-20117","cvss":6.1,"epss":0.0021,"slug":"cve-2026-20117-cisco-unified-ccx-cross-site-scripting-in-web-management","title":"Cisco Unified CCX cross-site scripting in web management interface","severity":"medium","exploited":false,"published_at":"2026-03-11T17:16:55.973+00:00","url":"https://junglewise.ai/threats/cve-2026-20117-cisco-unified-ccx-cross-site-scripting-in-web-management"},{"cve":"CVE-2025-20376","cvss":6.5,"epss":0.0048,"slug":"cve-2025-20376-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an","title":"A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute…","severity":"medium","exploited":false,"published_at":"2025-11-05T17:15:38.953+00:00","url":"https://junglewise.ai/threats/cve-2025-20376-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an"},{"cve":"CVE-2025-20375","cvss":6.5,"epss":0.0039,"slug":"cve-2025-20375-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an","title":"A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute…","severity":"medium","exploited":false,"published_at":"2025-11-05T17:15:38.723+00:00","url":"https://junglewise.ai/threats/cve-2025-20375-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an"},{"cve":"CVE-2025-20374","cvss":4.9,"epss":0.0114,"slug":"cve-2025-20374-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an","title":"A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a…","severity":"medium","exploited":false,"published_at":"2025-11-05T17:15:38.457+00:00","url":"https://junglewise.ai/threats/cve-2025-20374-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an"},{"cve":"CVE-2025-20358","cvss":9.4,"epss":0.0092,"slug":"cve-2025-20358-a-vulnerability-in-the-contact-center-express-ccx-editor","title":"A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an…","severity":"critical","exploited":false,"published_at":"2025-11-05T17:15:38.12+00:00","url":"https://junglewise.ai/threats/cve-2025-20358-a-vulnerability-in-the-contact-center-express-ccx-editor"},{"cve":"CVE-2025-20354","cvss":9.8,"epss":0.0087,"slug":"cve-2025-20354-a-vulnerability-in-the-java-remote-method-invocation-rmi-process","title":"A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an…","severity":"critical","exploited":false,"published_at":"2025-11-05T17:15:37.743+00:00","url":"https://junglewise.ai/threats/cve-2025-20354-a-vulnerability-in-the-java-remote-method-invocation-rmi-process"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Cisco IOS","slug":"ios","vulnerabilities":70,"url":"https://junglewise.ai/threats/technologies/ios"},{"name":"Cisco Identity Services Engine","slug":"identity-services-engine","vulnerabilities":58,"url":"https://junglewise.ai/threats/technologies/identity-services-engine"},{"name":"Cisco IOS XE","slug":"ios-xe","vulnerabilities":57,"url":"https://junglewise.ai/threats/technologies/ios-xe"},{"name":"Cisco Firepower Threat Defense","slug":"firepower-threat-defense","vulnerabilities":33,"url":"https://junglewise.ai/threats/technologies/firepower-threat-defense"},{"name":"Cisco Firepower Threat Defense Software","slug":"firepower-threat-defense-software","vulnerabilities":33,"url":"https://junglewise.ai/threats/technologies/firepower-threat-defense-software"},{"name":"Cisco IOS XR","slug":"ios-xr","vulnerabilities":31,"url":"https://junglewise.ai/threats/technologies/ios-xr"},{"name":"Cisco IOS XE Software","slug":"ios-xe-software","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/ios-xe-software"},{"name":"Cisco Adaptive Security Appliance Software","slug":"secure-firewall-asa-software","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/secure-firewall-asa-software"},{"name":"Cisco Snort 3","slug":"snort-3","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/snort-3"},{"name":"Cisco Ios Software","slug":"ios-software","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/ios-software"},{"name":"Cisco ISE Passive Identity Connector","slug":"ise-passive-identity-connector","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/ise-passive-identity-connector"},{"name":"Cisco Secure Firewall Management Center","slug":"secure-firewall-management-center","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/secure-firewall-management-center"}],"technology":{"hub":true,"name":"Cisco Unified Contact Center Express","slug":"unified-contact-center-express","vendor":{"hub":true,"name":"Cisco","slug":"cisco","url":"https://junglewise.ai/threats/vendors/cisco"},"aliases":[],"category":"software","homepage":"https://www.cisco.com/c/en/us/products/customer-collaboration/unified-contact-center-express/index.html","repo_url":"https://www.cisco.com/c/en/us/products/customer-collaboration/unified-contact-center-express/index.html","description":"An IP-based contact management solution that provides automated call distribution, interactive voice response, and computer telephony integration.","url":"https://junglewise.ai/threats/technologies/unified-contact-center-express"},"most_severe":[{"cve":"CVE-2025-20354","cvss":9.8,"epss":0.0087,"slug":"cve-2025-20354-a-vulnerability-in-the-java-remote-method-invocation-rmi-process","title":"A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an…","severity":"critical","exploited":false,"published_at":"2025-11-05T17:15:37.743+00:00","url":"https://junglewise.ai/threats/cve-2025-20354-a-vulnerability-in-the-java-remote-method-invocation-rmi-process"},{"cve":"CVE-2025-20358","cvss":9.4,"epss":0.0092,"slug":"cve-2025-20358-a-vulnerability-in-the-contact-center-express-ccx-editor","title":"A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an…","severity":"critical","exploited":false,"published_at":"2025-11-05T17:15:38.12+00:00","url":"https://junglewise.ai/threats/cve-2025-20358-a-vulnerability-in-the-contact-center-express-ccx-editor"},{"cve":"CVE-2025-20376","cvss":6.5,"epss":0.0048,"slug":"cve-2025-20376-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an","title":"A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute…","severity":"medium","exploited":false,"published_at":"2025-11-05T17:15:38.953+00:00","url":"https://junglewise.ai/threats/cve-2025-20376-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an"},{"cve":"CVE-2025-20375","cvss":6.5,"epss":0.0039,"slug":"cve-2025-20375-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an","title":"A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute…","severity":"medium","exploited":false,"published_at":"2025-11-05T17:15:38.723+00:00","url":"https://junglewise.ai/threats/cve-2025-20375-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an"},{"cve":"CVE-2026-20117","cvss":6.1,"epss":0.0021,"slug":"cve-2026-20117-cisco-unified-ccx-cross-site-scripting-in-web-management","title":"Cisco Unified CCX cross-site scripting in web management interface","severity":"medium","exploited":false,"published_at":"2026-03-11T17:16:55.973+00:00","url":"https://junglewise.ai/threats/cve-2026-20117-cisco-unified-ccx-cross-site-scripting-in-web-management"},{"cve":"CVE-2025-20374","cvss":4.9,"epss":0.0114,"slug":"cve-2025-20374-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an","title":"A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a…","severity":"medium","exploited":false,"published_at":"2025-11-05T17:15:38.457+00:00","url":"https://junglewise.ai/threats/cve-2025-20374-a-vulnerability-in-the-web-ui-of-cisco-unified-ccx-could-allow-an"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}