CVE-2018-0402: Cisco Unified Contact Center Express

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. Cisco Bug IDs: CSCvg70921.

Affected products

• Cisco Unified Contact Center Express: version 11.5(1) only
• Cisco Unified IP Interactive Voice Response: version 11.5(1) only

Published 2018-07-18. Last modified 2026-06-17.