CVE-2025-20129 Cisco CCP Web Chat Improper Sanitization Allows Data Hijack
CVE-2025-20129 Published on June 4, 2025

Cisco Customer Collaboration Platform Information Disclosure Vulnerability
A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to persuade users to disclose sensitive data. This vulnerability is due to improper sanitization of HTTP requests that are sent to the web-based chat interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the chat interface of a targeted user on a vulnerable server. A successful exploit could allow the attacker to redirect chat traffic to a server that is under their control, resulting in sensitive information being redirected to the attacker.

NVD

Vulnerability Analysis

CVE-2025-20129 can be exploited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and no impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
LOW
Availability Impact:
NONE

Weakness Type

What is an Information Disclosure Vulnerability?

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVE-2025-20129 has been classified to as an Information Disclosure vulnerability or weakness.


Products Associated with CVE-2025-20129

stack.watch emails you whenever new vulnerabilities are published in Cisco Socialminer or Cisco Unified Contact Center Express. Just hit a watch button to start following.

Cisco Socialminer
 
Cisco Unified Contact Center Express
 

Affected Versions

Cisco SocialMiner: Cisco Unified Contact Center Express:

Exploit Probability

EPSS
0.01%
Percentile
2.97%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.