CVE-2025-20129 Cisco Customer Collaboration Platform Information Disclosure Vulnerability

Medium 4.3 Published 4 Jun 2025 Updated 4 Jun 2025

An unauthenticated remote attacker can redirect chat traffic to a malicious server, causing sensitive user data to be disclosed.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2025-20129?

CVE-2025-20129 is a medium-severity vulnerability in Cisco SocialMiner, published on 4 Jun 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to persuade users to disclose sensitive data. This vulnerability is due to improper sanitization of HTTP requests that are sent to the web-based chat interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the chat interface of a targeted user on a vulnerable server. A successful exploit could allow the attacker to redirect chat traffic to a server that is under their control, resulting in sensitive information being redirected to the attacker.

Weakness: CWE-200

Which versions are affected by CVE-2025-20129?

It affects 2 products.

Products include Cisco Socialminer, Cisco Unified Contact Center Express.

How do I fix CVE-2025-20129?

No fix has been published for CVE-2025-20129 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-20129 being exploited?

There is no known exploitation of CVE-2025-20129 in the wild and no public exploit code.

Sources

Also known as GHSA-xpgj-x2hj-7mq2.