CVE-2017-6722: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact C...

Security readout for executives and security teams

This issue affects Cisco Unified Contact Center Express and could let a remote unauthenticated attacker impersonate a legitimate user through the XMPP service. For executives, the concern is unauthorized access to contact-center messaging or presence functions. The source bundle names affected release 10.6(1) and fixed release 11.5(1.10000.61). Exposure is most likely where Cisco Unified Contact Center Express 10.6(1) is deployed and its XMPP service is reachable. The bundle does not state deployment defaults, internet exposure patterns, or whether additional releases are affected beyond the named known affected release. Prioritize remediation if Cisco UCCx 10.6(1) is present, especially in exposed or high-value contact-center environments. The issue is old, but unauthenticated impersonation against communications infrastructure can create operational and customer-trust risk. Mitigation focus: Upgrade affected UCCx systems to fixed release 11.5(1.10000.61), following Cisco guidance.; Check the Cisco advisory for current fixed-release and interim-mitigation guidance.; Restrict access to the UCCx XMPP service to trusted networks during remediation..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.