CVE-2026-20109
Authenticated XSS Vulnerabilities in Cisco Contact Center Web Interface
Publication date: 2026-01-21
Last updated on: 2026-01-21
Assigner: Cisco Systems, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cisco | packaged_contact_center_enterprise | * |
| cisco | unified_contact_center_enterprise | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves multiple issues in the web-based management interface of Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise. An authenticated remote attacker with valid administrative credentials can perform a cross-site scripting (XSS) attack by injecting malicious code into specific pages of the interface. This happens because the interface does not properly validate user-supplied input, allowing the attacker to execute arbitrary script code or access sensitive browser-based information within the context of the affected interface.
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an attacker with administrative access to execute arbitrary scripts in the context of the web-based management interface. This could lead to unauthorized access to sensitive information displayed in the browser or manipulation of the interface, potentially compromising the security and integrity of the affected system.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, ensure that only trusted administrators have access to the web-based management interface, as exploitation requires valid administrative credentials. Additionally, apply any available patches or updates from Cisco for the affected products. Limit access to the management interface through network controls and monitor for suspicious activity involving the interface.