PT-2025-23817 · Cisco · Cisco Customer Collaboration Platform

Published 2025-06-04 · Updated 2025-06-05 · CVE-2025-20129

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Customer Collaboration Platform (CCP) versions not specified

Description A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP) could allow an unauthenticated, remote attacker to persuade users to disclose sensitive data. This issue is due to improper sanitization of HTTP requests sent to the web-based chat interface. An attacker could exploit this by sending crafted HTTP requests to the chat interface of a targeted user on a vulnerable server, potentially redirecting chat traffic to a server under their control and resulting in sensitive information being redirected to the attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-08244

CVE-2025-20129

Affected Products

Cisco Customer Collaboration Platform

References · 9

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ccp-info-disc-ZyGerQpd · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08244 · Security Note
• https://osv.dev/vulnerability/CVE-2025-20129 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20129 · Security Note
• https://twitter.com/BlackpointUS/status/1930675364944310668 · Twitter Post
• https://t.me/cvetracker/25412 · Telegram Post
• https://t.me/true_secator/7105 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1930463978209017860 · Twitter Post
• https://twitter.com/CVEnew/status/1930305588866756630 · Twitter Post