CVE-2025-20374 — Cisco Unified Contact Center Express Arbitrary File Download Vulnerability

Description (CNA)

A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary resources. This vulnerability is due to an insufficient input validation associated to specific UI features. An attacker could exploit this vulnerability by sending a crafted request to the web UI. A successful exploit could allow the attacker to gain read access to arbitrary files on the underlying operating system. To exploit this vulnerability, the attacker must have valid administrative credentials.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco Unified Contact Center Express	affected 10.5(1)SU1; affected 10.6(1); affected 11.6(1); affected 10.6(1)SU1; affected 10.6(1)SU3; affected 11.6(2); affected 12.0(1); affected 11.0(1)SU1; affected 11.5(1)SU1; affected 10.5(1); affected 12.5(1); affected 12.5(1)SU1; affected 12.5(1)SU2; affected 12.5(1)SU3; affected 12.5(1)_SU03_ES01; affected 12.5(1)_SU03_ES02; affected 12.5(1)_SU02_ES03; affected 12.5(1)_SU02_ES04; affected 12.5(1)_SU02_ES02; affected 12.5(1)_SU01_ES02; affected 12.5(1)_SU01_ES03; affected 12.5(1)_SU02_ES01; affected 11.6(2)ES07; affected 11.6(2)ES08; affected 12.5(1)_SU01_ES01; affected 12.0(1)ES04; affected 12.5(1)ES02; affected 12.5(1)ES03; affected 11.6(2)ES06; affected 12.5(1)ES01; affected 12.0(1)ES03; affected 12.0(1)ES01; affected 11.6(2)ES05; affected 12.0(1)ES02; affected 11.6(2)ES04; affected 11.6(2)ES03; affected 11.6(2)ES02; affected 11.6(2)ES01; affected 10.6(1)SU3ES03; affected 11.0(1)SU1ES03; affected 10.6(1)SU3ES01; affected 10.5(1)SU1ES10; affected 11.5(1)SU1ES03; affected 11.6(1)ES02; affected 11.5(1)ES01; affected 10.6(1)SU2; affected 10.6(1)SU2ES04; affected 11.6(1)ES01; affected 10.6(1)SU3ES02; affected 11.5(1)SU1ES02; affected 11.5(1)SU1ES01; affected 11.0(1)SU1ES02; affected 12.5(1)_SU03_ES03; affected 12.5(1)_SU03_ES04; affected 12.5(1)_SU03_ES05; affected UCCX 15.0.1; affected 12.5(1)_SU03_ES06

Vendor / product

Versions

Cisco / Cisco Unified Contact Center Express

affected 10.5(1)SU1; affected 10.6(1); affected 11.6(1); affected 10.6(1)SU1; affected 10.6(1)SU3; affected 11.6(2); affected 12.0(1); affected 11.0(1)SU1; affected 11.5(1)SU1; affected 10.5(1); affected 12.5(1); affected 12.5(1)SU1; affected 12.5(1)SU2; affected 12.5(1)SU3; affected 12.5(1)_SU03_ES01; affected 12.5(1)_SU03_ES02; affected 12.5(1)_SU02_ES03; affected 12.5(1)_SU02_ES04; affected 12.5(1)_SU02_ES02; affected 12.5(1)_SU01_ES02; affected 12.5(1)_SU01_ES03; affected 12.5(1)_SU02_ES01; affected 11.6(2)ES07; affected 11.6(2)ES08; affected 12.5(1)_SU01_ES01; affected 12.0(1)ES04; affected 12.5(1)ES02; affected 12.5(1)ES03; affected 11.6(2)ES06; affected 12.5(1)ES01; affected 12.0(1)ES03; affected 12.0(1)ES01; affected 11.6(2)ES05; affected 12.0(1)ES02; affected 11.6(2)ES04; affected 11.6(2)ES03; affected 11.6(2)ES02; affected 11.6(2)ES01; affected 10.6(1)SU3ES03; affected 11.0(1)SU1ES03; affected 10.6(1)SU3ES01; affected 10.5(1)SU1ES10; affected 11.5(1)SU1ES03; affected 11.6(1)ES02; affected 11.5(1)ES01; affected 10.6(1)SU2; affected 10.6(1)SU2ES04; affected 11.6(1)ES01; affected 10.6(1)SU3ES02; affected 11.5(1)SU1ES02; affected 11.5(1)SU1ES01; affected 11.0(1)SU1ES02; affected 12.5(1)_SU03_ES03; affected 12.5(1)_SU03_ES04; affected 12.5(1)_SU03_ES05; affected UCCX 15.0.1; affected 12.5(1)_SU03_ES06

CWE

CWE-22

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-mult-vuln-gK4TFXSn

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.