CVE-2025-20358
CriticalCVSS 9.4Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions for script creation and execution. This is due to improper authentication mechanisms in the communication between the CCX Editor and the Unified CCX server.
Risk Assessment
An attacker could redirect the authentication flow to a malicious server and create and execute arbitrary scripts on the underlying operating system of the Unified CCX server as an internal non-root user.
Recommendation
Apply the patches provided by Cisco for Cisco Unified CCX. Restrict network access to the Unified CCX server and monitor for unusual activity.
Other vulnerabilities in Cisco Unified CCX
See all- CVE-2025-20354Critical
A vulnerability in the Java RMI process of Cisco Unified CCX is due to improper authentication mechanisms associated with specific features. An unauthenticated remote attacker could upload a crafted file and execute arbitrary commands with root privileges.
- CVE-2025-20376Medium
A vulnerability in the web UI of Cisco Unified CCX is due to insufficient input validation in file upload mechanisms. An authenticated remote attacker with administrative credentials can upload and execute a malicious file, leading to arbitrary command execution and privilege escalation to root.
- CVE-2025-20375Medium
A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. It is due to insufficient input validation in specific UI features. The attacker must have valid administrative credentials.
- CVE-2025-20374Medium
A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary resources. The cause is insufficient input validation in specific UI features; exploitation requires valid administrative credentials.
Original NVD description (English source)
A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution. This vulnerability is due to improper authentication mechanisms in the communication between the CCX Editor and an affected Unified CCX server. An attacker could exploit this vulnerability by redirecting the authentication flow to a malicious server and tricking the CCX Editor into believing the authentication was successful. A successful exploit could allow the attacker to create and execute arbitrary scripts on the underlying operating system of an affected Unified CCX server, as an internal non-root user account.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS