CVE-2025-20129
MEDIUM EPSS 21.8%
Published Jun 4, 20251y ago · Modified Jun 17, 20262w ago
5.4 CVSS 3.1
Published Jun 4, 2025 1y ago
Last Modified Jun 17, 2026 2w ago
Description
A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to persuade users to disclose sensitive data. This vulnerability is due to improper sanitization of HTTP requests that are sent to the web-based chat interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the chat interface of a targeted user on a vulnerable server. A successful exploit could allow the attacker to redirect chat traffic to a server that is under their control, resulting in sensitive information being redirected to the attacker.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality Low
Integrity Low
Availability None
Threat Intelligence
EPSS Exploit Probability
21.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure
Affected Products 77
| Vendor | Product | Version | Range |
|---|---|---|---|
| cisco | socialminer | 10.5\(1\) | any |
| cisco | socialminer | 10.6\(1\) | any |
| cisco | socialminer | 10.6\(2\) | any |
| cisco | socialminer | 11.0\(1\) | any |
| cisco | socialminer | 11.5\(1\) | any |
| cisco | socialminer | 11.5\(1\)su1 | any |
| cisco | socialminer | 11.6\(1\) | any |
| cisco | socialminer | 11.6\(2\) | any |
| cisco | socialminer | 12.0\(1\) | any |
| cisco | socialminer | 12.0\(1\)es02 | any |
| cisco | socialminer | 12.0\(1\)es03 | any |
| cisco | socialminer | 12.0\(1\)es04 | any |
| cisco | socialminer | 12.5\(1\) | any |
| cisco | socialminer | 12.5\(1\)es01 | any |
| cisco | socialminer | 12.5\(1\)su1 | any |
| cisco | socialminer | 12.5\(1\)su2 | any |
| cisco | socialminer | 12.5\(1\)su3 | any |
| cisco | unified_contact_center_express | 8.5\(1\) | any |
| cisco | unified_contact_center_express | 9.0\(2\)su3es04 | any |
| cisco | unified_contact_center_express | 10.0\(1\)su1 | any |
| cisco | unified_contact_center_express | 10.0\(1\)su1es04 | any |
| cisco | unified_contact_center_express | 10.5\(1\) | any |
| cisco | unified_contact_center_express | 10.5\(1\)su1 | any |
| cisco | unified_contact_center_express | 10.5\(1\)su1es10 | any |
| cisco | unified_contact_center_express | 10.6\(1\) | any |
| cisco | unified_contact_center_express | 10.6\(1\)su1 | any |
| cisco | unified_contact_center_express | 10.6\(1\)su2 | any |
| cisco | unified_contact_center_express | 10.6\(1\)su2es04 | any |
| cisco | unified_contact_center_express | 10.6\(1\)su3 | any |
| cisco | unified_contact_center_express | 10.6\(1\)su3es01 | any |
| cisco | unified_contact_center_express | 10.6\(1\)su3es02 | any |
| cisco | unified_contact_center_express | 10.6\(1\)su3es03 | any |
| cisco | unified_contact_center_express | 11.0\(1\)su1 | any |
| cisco | unified_contact_center_express | 11.0\(1\)su1es02 | any |
| cisco | unified_contact_center_express | 11.0\(1\)su1es03 | any |
| cisco | unified_contact_center_express | 11.5\(1\)es01 | any |
| cisco | unified_contact_center_express | 11.5\(1\)su1 | any |
| cisco | unified_contact_center_express | 11.5\(1\)su1es01 | any |
| cisco | unified_contact_center_express | 11.5\(1\)su1es02 | any |
| cisco | unified_contact_center_express | 11.5\(1\)su1es03 | any |
| cisco | unified_contact_center_express | 11.6\(1\) | any |
| cisco | unified_contact_center_express | 11.6\(1\)es01 | any |
| cisco | unified_contact_center_express | 11.6\(1\)es02 | any |
| cisco | unified_contact_center_express | 11.6\(2\) | any |
| cisco | unified_contact_center_express | 11.6\(2\)es01 | any |
| cisco | unified_contact_center_express | 11.6\(2\)es02 | any |
| cisco | unified_contact_center_express | 11.6\(2\)es03 | any |
| cisco | unified_contact_center_express | 11.6\(2\)es04 | any |
| cisco | unified_contact_center_express | 11.6\(2\)es05 | any |
| cisco | unified_contact_center_express | 11.6\(2\)es06 | any |
| cisco | unified_contact_center_express | 11.6\(2\)es07 | any |
| cisco | unified_contact_center_express | 11.6\(2\)es08 | any |
| cisco | unified_contact_center_express | 12.0\(1\) | any |
| cisco | unified_contact_center_express | 12.0\(1\)es01 | any |
| cisco | unified_contact_center_express | 12.0\(1\)es02 | any |
| cisco | unified_contact_center_express | 12.0\(1\)es03 | any |
| cisco | unified_contact_center_express | 12.0\(1\)es04 | any |
| cisco | unified_contact_center_express | 12.5\(1\) | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su01_es01 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su01_es02 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su01_es03 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su02_es01 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su02_es02 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su02_es03 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su02_es04 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su03_es01 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su03_es02 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su03_es03 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su03_es04 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su03_es05 | any |
| cisco | unified_contact_center_express | 12.5\(1\)_su03_es06 | any |
| cisco | unified_contact_center_express | 12.5\(1\)es01 | any |
| cisco | unified_contact_center_express | 12.5\(1\)es02 | any |
| cisco | unified_contact_center_express | 12.5\(1\)es03 | any |
| cisco | unified_contact_center_express | 12.5\(1\)su1 | any |
| cisco | unified_contact_center_express | 12.5\(1\)su2 | any |
| cisco | unified_contact_center_express | 12.5\(1\)su3 | any |
References 1
- sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ccp-info-disc-ZyGerQpd
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.