https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-20288.htmlhttps://patchthecve.com/cve/CVE-2025-20288.htmlWed, 17 Jun 2026 08:41:21 +0000MEDIUM 5.8: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation for specific HTTP rehttps://patchthecve.com/cve/CVE-2025-20274.htmlhttps://patchthecve.com/cve/CVE-2025-20274.htmlWed, 17 Jun 2026 08:41:16 +0000MEDIUM 6.3: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to improper validation of files that are uploaded to the web-based management interfahttps://patchthecve.com/cve/CVE-2025-20114.htmlhttps://patchthecve.com/cve/CVE-2025-20114.htmlWed, 17 Jun 2026 08:40:41 +0000MEDIUM 4.3: A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker cohttps://patchthecve.com/cve/CVE-2025-20113.htmlhttps://patchthecve.com/cve/CVE-2025-20113.htmlWed, 17 Jun 2026 08:40:41 +0000HIGH 7.1: A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of user-supplied parameters in API or HT