CVE:CVE-2023-20058
CNNVD:CNNVD-202301-1012
Cisco Unified Intelligence Center是美国思科（Cisco）公司的一套基于Web的报表平台。该平台提供报告相关的业务数据和呼叫中心数据的展示功能。
Cisco Unified Intelligence Center存在安全漏洞，该漏洞源于无法正确验证用户提供的输入。攻击者利用该漏洞可以执行任意代码。
solution:Upgrade cisco packaged_contact_center_enterprise to a higher version than 12.5\(1\_su2_es05,12.5\(1\_su2_es05,and avoid the version [9.0\(1\),12.5\(1\)_su2_es05),[12.5\(1\)_su2,12.5\(1\)_su2_es05); Upgrade cisco unified_contact_center_enterprise to a higher version than 12.5\(1\_es02,12.6\(1\_es06,12.6\(1\_es06,and avoid the version (,12.5\(1\)_es02),[12.5\(2\),12.6\(1\)_es06),[12.6\(1\),12.6\(1\)_es06); Upgrade cisco unified_contact_center_express to a higher version than 12.5\(1\_su2_es05,12.5\(1\_su2_es05,and avoid the version (,12.5\(1\)_su2_es05),[12.5\(1\)_su2,12.5\(1\)_su2_es05); Upgrade cisco unified_intelligence_center to a higher version than 12.5\(1\_es02,12.6\(1\_es06,12.6\(1\_es06,and avoid the version (,12.5\(1\)_es02),[12.6\(1\),12.6\(1\)_es06),[12.6\(1\)_es2,12.6\(1\)_es06)