CVE-2018-0401: Cisco Unified Contact Center Express

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70967.

Affected products

• Cisco Unified Contact Center Express: version 11.5(1) only
• Cisco Unified IP Interactive Voice Response: version 11.5(1) only

Published 2018-07-18. Last modified 2026-06-17.