CNNVD-202507-2256 Information

CNNVD ID

CNNVD-202507-2256

CVE-2025-20274

  • CNNVD Published: 2025-07-16

Description (Chinese)

Cisco Unified Intelligence Center是美国思科(Cisco)公司的一套基于Web的报表平台。该平台提供报告相关的业务数据和呼叫中心数据的展示功能。 Cisco Unified Intelligence Center存在代码问题漏洞,该漏洞源于文件上传验证不足,可能导致执行任意命令。

Description (English)

Cisco United Information Center is a Web-based reporting platform for Cisco. The platform provides presentation functions for reporting relevant operational data and call centre data. Cisco United Inteligence Center had a code loophole, which stemmed from inadequate document upload verification and could lead to the execution of arbitrary orders.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

思科

Published

2025-07-16

Last Modified

2026-02-24

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuis-file-upload-UhNEtStm

Patch

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuis-file-upload-UhNEtStm

Share on: