CVE-2018-0403: Cisco Unified Contact Center Express

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to retrieve a cleartext password. Cisco Bug IDs: CSCvg71040.

Affected products

  • Cisco Unified Contact Center Express: version 11.5(1) only
  • Cisco Unified IP Interactive Voice Response: version 11.5(1) only

Published 2018-07-18. Last modified 2026-06-17.