CVE-2025-20129: Cisco Customer Collaboration Platform Information Disclosure Vulnerability

Published Jun 4, 2025

Updated

A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to persuade users to disclose sensitive data. This vulnerability is due to improper sanitization of HTTP requests that are sent to the web-based chat interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the chat interface of a targeted user on a vulnerable server. A successful exploit could allow the attacker to redirect chat traffic to a server that is under their control, resulting in sensitive information being redirected to the attacker.

Affected Software

78 affected components

Cisco Customer Collaboration Platform

Cisco SocialMiner=10.5\(1\)

Cisco SocialMiner=10.6\(1\)

Cisco SocialMiner=10.6\(2\)

Cisco SocialMiner=11.0\(1\)

Cisco SocialMiner=11.5\(1\)

Cisco SocialMiner=11.5\(1\)su1

Cisco SocialMiner=11.6\(1\)

Cisco SocialMiner=11.6\(2\)

Cisco SocialMiner=12.0\(1\)

Cisco SocialMiner=12.0\(1\)es02

Cisco SocialMiner=12.0\(1\)es03

Cisco SocialMiner=12.0\(1\)es04

Cisco SocialMiner=12.5\(1\)

Cisco SocialMiner=12.5\(1\)es01

Cisco SocialMiner=12.5\(1\)su1

Cisco SocialMiner=12.5\(1\)su2

Cisco SocialMiner=12.5\(1\)su3

Cisco Unified Contact Center Express=8.5\(1\)

Cisco Unified Contact Center Express=9.0\(2\)su3es04

Cisco Unified Contact Center Express=10.0\(1\)su1

Cisco Unified Contact Center Express=10.0\(1\)su1es04

Cisco Unified Contact Center Express=10.5\(1\)

Cisco Unified Contact Center Express=10.5\(1\)su1

Cisco Unified Contact Center Express=10.5\(1\)su1es10

Cisco Unified Contact Center Express=10.6\(1\)

Cisco Unified Contact Center Express=10.6\(1\)su1

Cisco Unified Contact Center Express=10.6\(1\)su2

Cisco Unified Contact Center Express=10.6\(1\)su2es04

Cisco Unified Contact Center Express=10.6\(1\)su3

Cisco Unified Contact Center Express=10.6\(1\)su3es01

Cisco Unified Contact Center Express=10.6\(1\)su3es02

Cisco Unified Contact Center Express=10.6\(1\)su3es03

Cisco Unified Contact Center Express=11.0\(1\)su1

Cisco Unified Contact Center Express=11.0\(1\)su1es02

Cisco Unified Contact Center Express=11.0\(1\)su1es03

Cisco Unified Contact Center Express=11.5\(1\)es01

Cisco Unified Contact Center Express=11.5\(1\)su1

Cisco Unified Contact Center Express=11.5\(1\)su1es01

Cisco Unified Contact Center Express=11.5\(1\)su1es02

Cisco Unified Contact Center Express=11.5\(1\)su1es03

Cisco Unified Contact Center Express=11.6\(1\)

Cisco Unified Contact Center Express=11.6\(1\)es01

Cisco Unified Contact Center Express=11.6\(1\)es02

Cisco Unified Contact Center Express=11.6\(2\)

Cisco Unified Contact Center Express=11.6\(2\)es01

Cisco Unified Contact Center Express=11.6\(2\)es02

Cisco Unified Contact Center Express=11.6\(2\)es03

Cisco Unified Contact Center Express=11.6\(2\)es04

Cisco Unified Contact Center Express=11.6\(2\)es05

Cisco Unified Contact Center Express=11.6\(2\)es06

Cisco Unified Contact Center Express=11.6\(2\)es07

Cisco Unified Contact Center Express=11.6\(2\)es08

Cisco Unified Contact Center Express=12.0\(1\)

Cisco Unified Contact Center Express=12.0\(1\)es01

Cisco Unified Contact Center Express=12.0\(1\)es02

Cisco Unified Contact Center Express=12.0\(1\)es03

Cisco Unified Contact Center Express=12.0\(1\)es04

Cisco Unified Contact Center Express=12.5\(1\)

Cisco Unified Contact Center Express=12.5\(1\)_su01_es01

Cisco Unified Contact Center Express=12.5\(1\)_su01_es02

Cisco Unified Contact Center Express=12.5\(1\)_su01_es03

Cisco Unified Contact Center Express=12.5\(1\)_su02_es01

Cisco Unified Contact Center Express=12.5\(1\)_su02_es02

Cisco Unified Contact Center Express=12.5\(1\)_su02_es03

Cisco Unified Contact Center Express=12.5\(1\)_su02_es04

Cisco Unified Contact Center Express=12.5\(1\)_su03_es01

Cisco Unified Contact Center Express=12.5\(1\)_su03_es02

Cisco Unified Contact Center Express=12.5\(1\)_su03_es03

Cisco Unified Contact Center Express=12.5\(1\)_su03_es04

Cisco Unified Contact Center Express=12.5\(1\)_su03_es05

Cisco Unified Contact Center Express=12.5\(1\)_su03_es06

Cisco Unified Contact Center Express=12.5\(1\)es01

Cisco Unified Contact Center Express=12.5\(1\)es02

Cisco Unified Contact Center Express=12.5\(1\)es03

Cisco Unified Contact Center Express=12.5\(1\)su1

Cisco Unified Contact Center Express=12.5\(1\)su2

Cisco Unified Contact Center Express=12.5\(1\)su3

Event History

Jun 4, 2025

CVE Published

via MITRE·04:17 PM

Data Sourced

via MITRE·04:17 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

News Published

via BleepingComputer·07:19 PM

News Published

via BleepingComputer·07:21 PM

Known Exploited

07:21 PM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2025-20129?

CVE-2025-20129 is rated as a high severity vulnerability due to its potential to expose sensitive user data.

How can I mitigate the risks associated with CVE-2025-20129?

To mitigate the risks, users should ensure all web-based chat interfaces are properly sanitized and adhere to security best practices.

Who is affected by CVE-2025-20129?

CVE-2025-20129 affects users of the Cisco Customer Collaboration Platform who utilize its web-based chat interface.

Can CVE-2025-20129 be exploited remotely?

Yes, CVE-2025-20129 can be exploited by an unauthenticated remote attacker, allowing them to persuade users to disclose sensitive information.

What specific issue causes CVE-2025-20129?

CVE-2025-20129 is caused by improper sanitization of HTTP requests within the web-based chat interface of Cisco Customer Collaboration Platform.