CVE-2026-20117
CVE-2026-20117: 1 tracked advisory record across Cisco. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Cisco
1 advisory- Advisory severityMedium6.1
Medium [CVE-2026-20116 +1] Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities
cisco-sa-cc-xss-MrNAH5JhSource published Source updated
This bulletin covers 2 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
Multiple vulnerabilities in the web-based management interface of Cisco Finesse, Cisco Packaged Contact Center Enterprise (Packaged CCE), Cisco Unified Contact Center Enterprise (Unified CCE), Cisco Unified Contact Center Express (Unified CCX), and Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities exist because the web-based management interface of an affected system does not sufficiently validate user-supplied input. An attacker could exploit these vulnerabil…
- Related products — impact not confirmed
- Cisco Unified Contact Center Enterprise
- Cisco Unified Contact Center Express
- Cisco Finesse
- Cisco Unified Intelligence Center
- Source-reported affected versions
- Scope: CVE-2026-20116: At the time of publication, this vulnerability affected Cisco Unified Intelligence Center and Cisco Finesse, regardless of device configuration.
- 12.6 and earlier — Migrate to a fixed release
- Release 15.0 (first fixed: 15.0(1)ES202511)
- 12.6 and earlier — Migrate to a fixed release
3 more entries in the full advisory.
- Source-reported fixed versions
- 15.0(1)ES202511
- 15.0 ES02 (Mar 2026)
- Mitigation guidance
- Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
- Release 12.6 and earlier: migrate to a fixed release.
- Release 15.0: upgrade to 15.0(1)ES202511.
- Release 12.6 and earlier: migrate to a fixed release.
3 more entries in the full advisory.
- Workarounds
- There are no workarounds that address these vulnerabilities.
Android app · Google Play
Monitor future Cisco CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.