Threats tagged 'ghsa-46m8-44h2-g6m9'

CVE-2025-20377 is a medium severity vulnerability in the API subsystem of Cisco Unified Intelligence Center. It allows an authenticated remote attacker with valid user credentials to send crafted requests to certain API endpoints and obtain sensitive information that should be restricted. The vulnerability arises from improper validation of API requests. No public exploits or known active exploitation have been reported. No patch or fixed versions are currently documented.