PT-2025-45134 · Cisco · Cisco Unified Intelligence Center

Published 2025-11-05 · Updated 2025-11-21 · CVE-2025-20377

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unified Intelligence Center (affected versions not specified)

Description A flaw exists in the API subsystem that may allow a remote attacker with valid credentials to access sensitive information. This is caused by insufficient validation of requests to certain API endpoints. An attacker could exploit this by sending a request to a specific API endpoint, potentially allowing a low-privileged user to view restricted information. The affected API endpoints are not explicitly specified, but the issue relates to bypassing endpoint validation within the Cisco Unified Intelligence Center.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-15257

CVE-2025-20377

Affected Products

Cisco Unified Intelligence Center

References · 4

• https://bdu.fstec.ru/vul/2025-15257 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-mult-vuln-gK4TFXSn · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20377 · Security Note
• https://twitter.com/0dayPublishing/status/1991879289118113803 · Twitter Post