CVE-2025-20358
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Summary
A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution.
This vulnerability is due to improper authentication mechanisms in the communication between the CCX Editor and an affected Unified CCX server. An attacker could exploit this vulnerability by redirecting the authentication flow to a malicious server and tricking the CCX Editor into believing the authentication was successful. A successful exploit could allow the attacker to create and execute arbitrary scripts on the underlying operating system of an affected Unified CCX server, as an internal non-root user account.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Unified Contact Center Express | 10.5(1)SU1 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1) | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(1) | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU1 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU3 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2) | affected |
| Cisco | Cisco Unified Contact Center Express | 12.0(1) | affected |
| Cisco | Cisco Unified Contact Center Express | 11.0(1)SU1 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.5(1)SU1 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.5(1) | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1) | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)SU1 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)SU2 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)SU3 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU02_ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU02_ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU02_ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU01_ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU01_ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU02_ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES07 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES08 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU01_ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.0(1)ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES06 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.0(1)ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.0(1)ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES05 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.0(1)ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(2)ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU3ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.0(1)SU1ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU3ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.5(1)SU1ES10 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.5(1)SU1ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(1)ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.5(1)ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU2 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU2ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.6(1)ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 10.6(1)SU3ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.5(1)SU1ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.5(1)SU1ES01 | affected |
| Cisco | Cisco Unified Contact Center Express | 11.0(1)SU1ES02 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES03 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES04 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES05 | affected |
| Cisco | Cisco Unified Contact Center Express | UCCX 15.0.1 | affected |
| Cisco | Cisco Unified Contact Center Express | 12.5(1)_SU03_ES06 | affected |
Weaknesses
- CWE-306: Missing Authentication for Critical Function
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.