Cisco Unified Intelligence Center API Information Disclosure Vulnerability_CVE-2025-20377

{
    "lastseen": "",
    "description": "A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system.\r\n\r\nThis vulnerability is due to improper validation of requests to certain API endpoints. An attacker could exploit this vulnerability by sending a valid request to a specific API endpoint within the affected system. A successful exploit could allow a low-privileged user to view sensitive information on the affected system that should be restricted. To exploit this vulnerability, the attacker must have valid user credentials on the affected system.",
    "published": "2025-11-05T16:31:52.595Z",
    "modified": "2025-11-05T20:14:05.911Z",
    "type": "cve",
    "title": "Cisco Unified Intelligence Center API Information Disclosure Vulnerability",
    "source": "cisco",
    "references": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-mult-vuln-gK4TFXSn",
    "id": "CVE-2025-20377",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "Cisco Cisco Packaged Contact Center Enterprise 12.5(1)\nCisco Cisco Packaged Contact Center Enterprise 11.0(1)\nCisco Cisco Packaged Contact Center Enterprise 12.0(1)\nCisco Cisco Packaged Contact Center Enterprise 11.0(2)\nCisco Cisco Packaged Contact Center Enterprise 11.5(1)\nCisco Cisco Packaged Contact Center Enterprise 10.5(1)\nCisco Cisco Packaged Contact Center Enterprise 10.5(2)\nCisco Cisco Packaged Contact Center Enterprise 11.6(2)\nCisco Cisco Packaged Contact Center Enterprise 10.5(1)_ES7\nCisco Cisco Packaged Contact Center Enterprise 11.6(1)\nCisco Cisco Packaged Contact Center Enterprise 10.5(2)_ES8\nCisco Cisco Packaged Contact Center Enterprise 12.6(1)\nCisco Cisco Packaged Contact Center Enterprise 12.5(2)\nCisco Cisco Packaged Contact Center Enterprise 12.6(2)\nCisco Cisco Packaged Contact Center Enterprise 15.0(1)\nCisco Cisco Unified Contact Center Enterprise 12.6(1)ES3\nCisco Cisco Unified Contact Center Enterprise 12.6(1)ES1\nCisco Cisco Unified Contact Center Enterprise 12.6(1)\nCisco Cisco Unified Contact Center Enterprise 12.6(1)ES2\nCisco Cisco Unified Contact Center Enterprise 12.6(1)SecurityPatch\nCisco Cisco Unified Contact Center Enterprise 12.5(1)ES1\nCisco Cisco Unified Contact Center Enterprise 12.5(1)\nCisco Cisco Unified Contact Center Enterprise 12.6(1)ES4\nCisco Cisco Unified Contact Center Enterprise 11.0(1)\nCisco Cisco Unified Contact Center Enterprise 10.5(1)\nCisco Cisco Unified Contact Center Enterprise 12.0(1)\nCisco Cisco Unified Contact Center Enterprise 10.5\nCisco Cisco Unified Contact Center Enterprise 11.0\nCisco Cisco Unified Contact Center Enterprise 11.5\nCisco Cisco Unified Contact Center Enterprise 12.6(2)\nCisco Cisco Unified Contact Center Enterprise 12.6(2)ES1\nCisco Cisco Unified Contact Center Enterprise 12.6(2)ES2\nCisco Cisco Unified Contact Center Enterprise 15.0(1)\nCisco Cisco Unified Contact Center Enterprise 12.6(2)ES3\nCisco Cisco Unified Contact Center Enterprise 15.0(1)ET01\nCisco Cisco Unified Contact Center Enterprise 15.0(1)_SP1\nCisco Cisco Unified Contact Center Express 10.5(1)SU1\nCisco Cisco Unified Contact Center Express 10.6(1)\nCisco Cisco Unified Contact Center Express 11.6(1)\nCisco Cisco Unified Contact Center Express 10.6(1)SU1\nCisco Cisco Unified Contact Center Express 10.6(1)SU3\nCisco Cisco Unified Contact Center Express 11.6(2)\nCisco Cisco Unified Contact Center Express 12.0(1)\nCisco Cisco Unified Contact Center Express 11.0(1)SU1\nCisco Cisco Unified Contact Center Express 11.5(1)SU1\nCisco Cisco Unified Contact Center Express 10.5(1)\nCisco Cisco Unified Contact Center Express 12.5(1)\nCisco Cisco Unified Contact Center Express 12.5(1)SU1\nCisco Cisco Unified Contact Center Express 12.5(1)SU2\nCisco Cisco Unified Contact Center Express 12.5(1)SU3\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES01\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES02\nCisco Cisco Unified Contact Center Express 12.5(1)_SU02_ES03\nCisco Cisco Unified Contact Center Express 12.5(1)_SU02_ES04\nCisco Cisco Unified Contact Center Express 12.5(1)_SU02_ES02\nCisco Cisco Unified Contact Center Express 12.5(1)_SU01_ES02\nCisco Cisco Unified Contact Center Express 12.5(1)_SU01_ES03\nCisco Cisco Unified Contact Center Express 12.5(1)_SU02_ES01\nCisco Cisco Unified Contact Center Express 11.6(2)ES07\nCisco Cisco Unified Contact Center Express 11.6(2)ES08\nCisco Cisco Unified Contact Center Express 12.5(1)_SU01_ES01\nCisco Cisco Unified Contact Center Express 12.0(1)ES04\nCisco Cisco Unified Contact Center Express 12.5(1)ES02\nCisco Cisco Unified Contact Center Express 12.5(1)ES03\nCisco Cisco Unified Contact Center Express 11.6(2)ES06\nCisco Cisco Unified Contact Center Express 12.5(1)ES01\nCisco Cisco Unified Contact Center Express 12.0(1)ES03\nCisco Cisco Unified Contact Center Express 12.0(1)ES01\nCisco Cisco Unified Contact Center Express 11.6(2)ES05\nCisco Cisco Unified Contact Center Express 12.0(1)ES02\nCisco Cisco Unified Contact Center Express 11.6(2)ES04\nCisco Cisco Unified Contact Center Express 11.6(2)ES03\nCisco Cisco Unified Contact Center Express 11.6(2)ES02\nCisco Cisco Unified Contact Center Express 11.6(2)ES01\nCisco Cisco Unified Contact Center Express 10.6(1)SU3ES03\nCisco Cisco Unified Contact Center Express 11.0(1)SU1ES03\nCisco Cisco Unified Contact Center Express 10.6(1)SU3ES01\nCisco Cisco Unified Contact Center Express 10.5(1)SU1ES10\nCisco Cisco Unified Contact Center Express 11.5(1)SU1ES03\nCisco Cisco Unified Contact Center Express 11.6(1)ES02\nCisco Cisco Unified Contact Center Express 11.5(1)ES01\nCisco Cisco Unified Contact Center Express 10.6(1)SU2\nCisco Cisco Unified Contact Center Express 10.6(1)SU2ES04\nCisco Cisco Unified Contact Center Express 11.6(1)ES01\nCisco Cisco Unified Contact Center Express 10.6(1)SU3ES02\nCisco Cisco Unified Contact Center Express 11.5(1)SU1ES02\nCisco Cisco Unified Contact Center Express 11.5(1)SU1ES01\nCisco Cisco Unified Contact Center Express 11.0(1)SU1ES02\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES03\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES04\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES05\nCisco Cisco Unified Contact Center Express UCCX 15.0.1\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES06\nCisco Cisco Unified Intelligence Center 11.6(1)\nCisco Cisco Unified Intelligence Center 10.5(1)\nCisco Cisco Unified Intelligence Center 11.0(1)\nCisco Cisco Unified Intelligence Center 11.5(1)\nCisco Cisco Unified Intelligence Center 12.0(1)\nCisco Cisco Unified Intelligence Center 12.5(1)\nCisco Cisco Unified Intelligence Center 11.0(2)\nCisco Cisco Unified Intelligence Center 12.6(1)\nCisco Cisco Unified Intelligence Center 12.5(1)SU\nCisco Cisco Unified Intelligence Center 12.6(1)_ET\nCisco Cisco Unified Intelligence Center 12.6(1)_ES05_ET\nCisco Cisco Unified Intelligence Center 11.0(3)\nCisco Cisco Unified Intelligence Center 12.6(2)\nCisco Cisco Unified Intelligence Center 12.6(2)_504_Issue_ET\nCisco Cisco Unified Intelligence Center 12.6.1_ExcelIssue_ET\nCisco Cisco Unified Intelligence Center 12.6(2)_Permalink_ET\nCisco Cisco Unified Intelligence Center 12.6.2_CSCwk19536_ET\nCisco Cisco Unified Intelligence Center 12.6.2_CSCwm96922_ET\nCisco Cisco Unified Intelligence Center 12.6.2_Amq_OOS_ET\nCisco Cisco Unified Intelligence Center 12.5(2)ET_CSCwi79933\nCisco Cisco Unified Intelligence Center 12.6(2)_ET\nCisco Cisco Unified Intelligence Center 12.6.2_CSCwn48501_ET\nCisco Cisco Unified Intelligence Center 15.0(1)\nCisco Cisco Unified Intelligence Center 12.6.2_CSCwp61293_ET\nCisco Cisco Unified Intelligence Center 12.6.2_CSCwp92614_ET",
    "sourceHref": "",
    "cvss": {
        "score": 4.3,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Cisco Packaged Contact Center Enterprise",
    "version": "12.5(1)",
    "vendor": "Cisco",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}