CVE-2025-20376
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A vulnerability in the web UI of Cisco Unified CCX is due to insufficient input validation in file upload mechanisms. An authenticated remote attacker with administrative credentials can upload and execute a malicious file, leading to arbitrary command execution and privilege escalation to root.
Risk Assessment
An attacker with valid administrative credentials could gain full control of the system, resulting in complete compromise of the service.
Recommendation
Restrict administrative access to the web UI and apply Cisco security fixes for Cisco Unified CCX.
Other vulnerabilities in Cisco Unified CCX
See all- CVE-2025-20358Critical
A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions for script creation and execution. This is due to improper authentication mechanisms in the communication between the CCX Editor and the Unified CCX server.
- CVE-2025-20354Critical
A vulnerability in the Java RMI process of Cisco Unified CCX is due to improper authentication mechanisms associated with specific features. An unauthenticated remote attacker could upload a crafted file and execute arbitrary commands with root privileges.
- CVE-2025-20375Medium
A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. It is due to insufficient input validation in specific UI features. The attacker must have valid administrative credentials.
- CVE-2025-20374Medium
A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary resources. The cause is insufficient input validation in specific UI features; exploitation requires valid administrative credentials.
Original NVD description (English source)
A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is due to an insufficient input validation associated to file upload mechanisms. An attacker could exploit this vulnerability by uploading a malicious file to the web UI and executing it. A successful exploit could allow the attacker to execute arbitrary commands on the underlying system and elevate privileges to root. To exploit this vulnerability, the attacker must have valid administrative credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS