Medium WID-SEC-2026-0193 2 CVEs

Cisco Unified Contact Center Enterprise: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Jan 21, 2026 · Updated Jan 21, 2026 · de-DE

Vendor: Cisco Product: Unified Contact Center Enterprise Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco Unified Contact Center Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Cisco Unified Contact Center Enterprise kombiniert Mehrkanal-Rufverteilung (ACD) mit IP-Telefonie in einer einheitlichen Lösung.

Vulnerabilities 2

Medium 4.8

CVE-2026-20055

Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability

Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting…

Cisco Cisco Unified Contact Center Enterprise Cisco Packaged Contact Center Enterprise Network devices

Jan 21, 2026
Medium 4.8

CVE-2026-20109

Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability

Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting…

Cisco Cisco Unified Contact Center Enterprise Cisco Packaged Contact Center Enterprise Network devices

Jan 21, 2026

Revision history

2026-01-21 #1
Initiale Fassung

References

Cisco Security Advisory vom 2026-01-21
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD