CVE-2025-20113: Cisco Unified Intelligence Center Privilege Escalation Vulnerability

Published May 21, 2025

Updated

A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of user-supplied parameters in API or HTTP requests. An attacker could exploit this vulnerability by submitting a crafted API or HTTP request to an affected system. A successful exploit could allow the attacker to access, modify, or delete data beyond the sphere of their intended access level, including obtaining potentially sensitive information stored in the system.

Affected Software

74 affected components

Cisco Unified Intelligence Center

Cisco Unified Intelligence Center=10.5\(1\)

Cisco Unified Intelligence Center=11.0\(1\)

Cisco Unified Intelligence Center=11.0\(2\)

Cisco Unified Intelligence Center=11.0\(3\)

Cisco Unified Intelligence Center=11.5\(1\)

Cisco Unified Intelligence Center=11.6\(1\)

Cisco Unified Intelligence Center=12.0\(1\)

Cisco Unified Intelligence Center=12.5\(1\)

Cisco Unified Intelligence Center=12.5\(1\)su

Cisco Unified Intelligence Center=12.6\(1\)

Cisco Unified Intelligence Center=12.6\(1\)_es05_et

Cisco Unified Intelligence Center=12.6\(1\)_et

Cisco Unified Intelligence Center=12.6\(2\)

Cisco Unified Contact Center Express=8.5\(1\)

Cisco Unified Contact Center Express=9.0\(2\)su3es04

Cisco Unified Contact Center Express=10.0\(1\)su1

Cisco Unified Contact Center Express=10.0\(1\)su1es04

Cisco Unified Contact Center Express=10.5\(1\)

Cisco Unified Contact Center Express=10.5\(1\)su1

Cisco Unified Contact Center Express=10.5\(1\)su1es10

Cisco Unified Contact Center Express=10.6\(1\)

Cisco Unified Contact Center Express=10.6\(1\)su1

Cisco Unified Contact Center Express=10.6\(1\)su2

Cisco Unified Contact Center Express=10.6\(1\)su2es04

Cisco Unified Contact Center Express=10.6\(1\)su3

Cisco Unified Contact Center Express=10.6\(1\)su3es01

Cisco Unified Contact Center Express=10.6\(1\)su3es02

Cisco Unified Contact Center Express=10.6\(1\)su3es03

Cisco Unified Contact Center Express=11.0\(1\)su1

Cisco Unified Contact Center Express=11.0\(1\)su1es02

Cisco Unified Contact Center Express=11.0\(1\)su1es03

Cisco Unified Contact Center Express=11.5\(1\)es01

Cisco Unified Contact Center Express=11.5\(1\)su1

Cisco Unified Contact Center Express=11.5\(1\)su1es01

Cisco Unified Contact Center Express=11.5\(1\)su1es02

Cisco Unified Contact Center Express=11.5\(1\)su1es03

Cisco Unified Contact Center Express=11.6\(1\)

Cisco Unified Contact Center Express=11.6\(1\)es01

Cisco Unified Contact Center Express=11.6\(1\)es02

Cisco Unified Contact Center Express=11.6\(2\)

Cisco Unified Contact Center Express=11.6\(2\)es01

Cisco Unified Contact Center Express=11.6\(2\)es02

Cisco Unified Contact Center Express=11.6\(2\)es03

Cisco Unified Contact Center Express=11.6\(2\)es04

Cisco Unified Contact Center Express=11.6\(2\)es05

Cisco Unified Contact Center Express=11.6\(2\)es06

Cisco Unified Contact Center Express=11.6\(2\)es07

Cisco Unified Contact Center Express=11.6\(2\)es08

Cisco Unified Contact Center Express=12.0\(1\)

Cisco Unified Contact Center Express=12.0\(1\)es01

Cisco Unified Contact Center Express=12.0\(1\)es02

Cisco Unified Contact Center Express=12.0\(1\)es03

Cisco Unified Contact Center Express=12.0\(1\)es04

Cisco Unified Contact Center Express=12.5\(1\)

Cisco Unified Contact Center Express=12.5\(1\)_su01_es01

Cisco Unified Contact Center Express=12.5\(1\)_su01_es02

Cisco Unified Contact Center Express=12.5\(1\)_su01_es03

Cisco Unified Contact Center Express=12.5\(1\)_su02_es01

Cisco Unified Contact Center Express=12.5\(1\)_su02_es02

Cisco Unified Contact Center Express=12.5\(1\)_su02_es03

Cisco Unified Contact Center Express=12.5\(1\)_su02_es04

Cisco Unified Contact Center Express=12.5\(1\)_su03_es01

Cisco Unified Contact Center Express=12.5\(1\)_su03_es02

Cisco Unified Contact Center Express=12.5\(1\)_su03_es03

Cisco Unified Contact Center Express=12.5\(1\)_su03_es04

Cisco Unified Contact Center Express=12.5\(1\)_su03_es05

Cisco Unified Contact Center Express=12.5\(1\)_su03_es06

Cisco Unified Contact Center Express=12.5\(1\)es01

Cisco Unified Contact Center Express=12.5\(1\)es02

Cisco Unified Contact Center Express=12.5\(1\)es03

Cisco Unified Contact Center Express=12.5\(1\)su1

Cisco Unified Contact Center Express=12.5\(1\)su2

Cisco Unified Contact Center Express=12.5\(1\)su3

Event History

May 21, 2025

CVE Published

via MITRE·04:19 PM

Data Sourced

via MITRE·04:19 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-20113?

CVE-2025-20113 has been assigned a severity rating of medium due to the potential for privilege escalation.

How do I fix CVE-2025-20113?

To remediate CVE-2025-20113, ensure that you're running the latest patched version of Cisco Unified Intelligence Center provided by Cisco.

What systems are affected by CVE-2025-20113?

CVE-2025-20113 affects Cisco Unified Intelligence Center across various versions.

What type of attack does CVE-2025-20113 enable?

CVE-2025-20113 enables authenticated remote attackers to escalate their privileges to Administrator for certain functionalities.

Is CVE-2025-20113 easy to exploit?

Exploitation of CVE-2025-20113 requires an authenticated user to access the affected system, making it a targeted attack.