CVE-2025-20114

A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system.

This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker could exploit this vulnerability by submitting crafted API requests to an affected system to execute an insecure direct object reference attack. A successful exploit could allow the attacker to access specific data that is associated with different users on the affected system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
ciscoCNA
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
ciscounified_intelligence_center
10.5\(1\)
ciscounified_intelligence_center
11.0\(1\)
ciscounified_intelligence_center
11.0\(2\)
ciscounified_intelligence_center
11.0\(3\)
ciscounified_intelligence_center
11.5\(1\)
ciscounified_intelligence_center
11.6\(1\)
ciscounified_intelligence_center
12.0\(1\)
ciscounified_intelligence_center
12.5\(1\)
ciscounified_intelligence_center
12.5\(1\)su
ciscounified_intelligence_center
12.6\(1\)
ciscounified_intelligence_center
12.6\(1\)_es05_et
ciscounified_intelligence_center
12.6\(1\)_et
ciscounified_intelligence_center
12.6\(2\)
ciscounified_contact_center_express
8.5\(1\)
ciscounified_contact_center_express
9.0\(2\)su3es04
ciscounified_contact_center_express
10.0\(1\)su1
ciscounified_contact_center_express
10.0\(1\)su1es04
ciscounified_contact_center_express
10.5\(1\)
ciscounified_contact_center_express
10.5\(1\)su1
ciscounified_contact_center_express
10.5\(1\)su1es10
ciscounified_contact_center_express
10.6\(1\)
ciscounified_contact_center_express
10.6\(1\)su1
ciscounified_contact_center_express
10.6\(1\)su2
ciscounified_contact_center_express
10.6\(1\)su2es04
ciscounified_contact_center_express
10.6\(1\)su3
ciscounified_contact_center_express
10.6\(1\)su3es01
ciscounified_contact_center_express
10.6\(1\)su3es02
ciscounified_contact_center_express
10.6\(1\)su3es03
ciscounified_contact_center_express
11.0\(1\)su1
ciscounified_contact_center_express
11.0\(1\)su1es02
ciscounified_contact_center_express
11.0\(1\)su1es03
ciscounified_contact_center_express
11.5\(1\)es01
ciscounified_contact_center_express
11.5\(1\)su1
ciscounified_contact_center_express
11.5\(1\)su1es01
ciscounified_contact_center_express
11.5\(1\)su1es02
ciscounified_contact_center_express
11.5\(1\)su1es03
ciscounified_contact_center_express
11.6\(1\)
ciscounified_contact_center_express
11.6\(1\)es01
ciscounified_contact_center_express
11.6\(1\)es02
ciscounified_contact_center_express
11.6\(2\)
ciscounified_contact_center_express
11.6\(2\)es01
ciscounified_contact_center_express
11.6\(2\)es02
ciscounified_contact_center_express
11.6\(2\)es03
ciscounified_contact_center_express
11.6\(2\)es04
ciscounified_contact_center_express
11.6\(2\)es05
ciscounified_contact_center_express
11.6\(2\)es06
ciscounified_contact_center_express
11.6\(2\)es07
ciscounified_contact_center_express
11.6\(2\)es08
ciscounified_contact_center_express
12.0\(1\)
ciscounified_contact_center_express
12.0\(1\)es01
ciscounified_contact_center_express
12.0\(1\)es02
ciscounified_contact_center_express
12.0\(1\)es03
ciscounified_contact_center_express
12.0\(1\)es04
ciscounified_contact_center_express
12.5\(1\)
ciscounified_contact_center_express
12.5\(1\)_su01_es01
ciscounified_contact_center_express
12.5\(1\)_su01_es02
ciscounified_contact_center_express
12.5\(1\)_su01_es03
ciscounified_contact_center_express
12.5\(1\)_su02_es01
ciscounified_contact_center_express
12.5\(1\)_su02_es02
ciscounified_contact_center_express
12.5\(1\)_su02_es03
ciscounified_contact_center_express
12.5\(1\)_su02_es04
ciscounified_contact_center_express
12.5\(1\)_su03_es01
ciscounified_contact_center_express
12.5\(1\)_su03_es02
ciscounified_contact_center_express
12.5\(1\)_su03_es03
ciscounified_contact_center_express
12.5\(1\)_su03_es04
ciscounified_contact_center_express
12.5\(1\)_su03_es05
ciscounified_contact_center_express
12.5\(1\)_su03_es06
ciscounified_contact_center_express
12.5\(1\)es01
ciscounified_contact_center_express
12.5\(1\)es02
ciscounified_contact_center_express
12.5\(1\)es03
ciscounified_contact_center_express
12.5\(1\)su1
ciscounified_contact_center_express
12.5\(1\)su2
ciscounified_contact_center_express
12.5\(1\)su3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuis-priv-esc-3Pk96SU4