Skip to content
OpenAdvisories
Medium WID-SEC-2025-1246 4 CVEs

Cisco Unified Contact Center Express (UCCX): Mehrere Schwachstellen

Published Jun 4, 2025 · Updated Jun 4, 2025 · de-DE

Vendor: Cisco Product: Unified Contact Center Express (UCCX) Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Unified Contact Center Express (UCCX) ausnutzen, um beliebigen Programmcode auszuführen oder Cross-Site-Scripting durchzuführen.

Product

Cisco Unified Contact Center Express (UCCX) ist die Kontaktverwaltung für Cisco Unified Communications.

Vulnerabilities 4

  • Medium 5.3
    CVE-2025-20275

    Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability

    A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device.  This vulnerability is due to insecure deserialization of Ja…

    Cisco Cisco Unified Contact Center Express Network devices
  • Medium 4.8
    CVE-2025-20279

    Cisco Unifed Contact Center Express Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to conduct a stored XSS attack on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentia…

    Cisco Cisco Unified Contact Center Express Network devices
  • Low 3.8
    CVE-2025-20276

    Cisco Unified Contact Center Express Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.&n…

    Cisco Cisco Unified Contact Center Express Network devices
  • Low 3.4
    CVE-2025-20277

    Cisco Unified Contact Center Express Path Traversal Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th…

    Cisco Cisco Unified Contact Center Express Network devices

Revision history

  1. #1

    Initiale Fassung

References