Description

A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of user-supplied parameters in API or HTTP requests. An attacker could exploit this vulnerability by submitting a crafted API or HTTP request to an affected system. A successful exploit could allow the attacker to access, modify, or delete data beyond the sphere of their intended access level, including obtaining potentially sensitive information stored in the system.

INFO

Published Date :

2025-05-21T16:19:41.378Z

Last Modified :

2026-02-26T18:28:00.998Z

Source :

cisco
AFFECTED PRODUCTS

The following products are affected by CVE-2025-20113 vulnerability.

Vendors Products
Cisco
  • Unified Contact Center Express
  • Unified Intelligence Center
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-20113.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact