CVE-2023-20061

MEDIUM

Cisco Unified Intelligence Center - SSRF

Title source: llm

Description

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to release software updates that address these vulnerabilities.

References (1)

[Vendor Advisory] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-infodisc-ssrf-84ZBmwVk

Scores

CVSS v3 6.5

EPSS 0.0051

EPSS Percentile 66.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-200 CWE-668

Status published

Affected Products (4)

cisco/packaged_contact_center_enterprise

cisco/unified_contact_center_enterprise

cisco/unified_contact_center_express

cisco/unified_intelligence_center < 12.6\(2\)

Timeline

Published Mar 03, 2023

Tracked Since Feb 18, 2026