Cisco Unified Contact Center Express Arbitrary File Download Vulnerability_CVE-2025-20374

{
    "lastseen": "",
    "description": "A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary resources.\r\n\r\nThis vulnerability is due to an insufficient input validation associated to specific UI features. An attacker could exploit this vulnerability by sending a crafted request to the web UI. A successful exploit could allow the attacker to gain read access to arbitrary files on the underlying operating system. To exploit this vulnerability, the attacker must have valid administrative credentials.",
    "published": "2025-11-05T16:31:23.862Z",
    "modified": "2025-11-05T20:11:12.630Z",
    "type": "cve",
    "title": "Cisco Unified Contact Center Express Arbitrary File Download Vulnerability",
    "source": "cisco",
    "references": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-mult-vuln-gK4TFXSn",
    "id": "CVE-2025-20374",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "Cisco Cisco Unified Contact Center Express 10.5(1)SU1\nCisco Cisco Unified Contact Center Express 10.6(1)\nCisco Cisco Unified Contact Center Express 11.6(1)\nCisco Cisco Unified Contact Center Express 10.6(1)SU1\nCisco Cisco Unified Contact Center Express 10.6(1)SU3\nCisco Cisco Unified Contact Center Express 11.6(2)\nCisco Cisco Unified Contact Center Express 12.0(1)\nCisco Cisco Unified Contact Center Express 11.0(1)SU1\nCisco Cisco Unified Contact Center Express 11.5(1)SU1\nCisco Cisco Unified Contact Center Express 10.5(1)\nCisco Cisco Unified Contact Center Express 12.5(1)\nCisco Cisco Unified Contact Center Express 12.5(1)SU1\nCisco Cisco Unified Contact Center Express 12.5(1)SU2\nCisco Cisco Unified Contact Center Express 12.5(1)SU3\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES01\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES02\nCisco Cisco Unified Contact Center Express 12.5(1)_SU02_ES03\nCisco Cisco Unified Contact Center Express 12.5(1)_SU02_ES04\nCisco Cisco Unified Contact Center Express 12.5(1)_SU02_ES02\nCisco Cisco Unified Contact Center Express 12.5(1)_SU01_ES02\nCisco Cisco Unified Contact Center Express 12.5(1)_SU01_ES03\nCisco Cisco Unified Contact Center Express 12.5(1)_SU02_ES01\nCisco Cisco Unified Contact Center Express 11.6(2)ES07\nCisco Cisco Unified Contact Center Express 11.6(2)ES08\nCisco Cisco Unified Contact Center Express 12.5(1)_SU01_ES01\nCisco Cisco Unified Contact Center Express 12.0(1)ES04\nCisco Cisco Unified Contact Center Express 12.5(1)ES02\nCisco Cisco Unified Contact Center Express 12.5(1)ES03\nCisco Cisco Unified Contact Center Express 11.6(2)ES06\nCisco Cisco Unified Contact Center Express 12.5(1)ES01\nCisco Cisco Unified Contact Center Express 12.0(1)ES03\nCisco Cisco Unified Contact Center Express 12.0(1)ES01\nCisco Cisco Unified Contact Center Express 11.6(2)ES05\nCisco Cisco Unified Contact Center Express 12.0(1)ES02\nCisco Cisco Unified Contact Center Express 11.6(2)ES04\nCisco Cisco Unified Contact Center Express 11.6(2)ES03\nCisco Cisco Unified Contact Center Express 11.6(2)ES02\nCisco Cisco Unified Contact Center Express 11.6(2)ES01\nCisco Cisco Unified Contact Center Express 10.6(1)SU3ES03\nCisco Cisco Unified Contact Center Express 11.0(1)SU1ES03\nCisco Cisco Unified Contact Center Express 10.6(1)SU3ES01\nCisco Cisco Unified Contact Center Express 10.5(1)SU1ES10\nCisco Cisco Unified Contact Center Express 11.5(1)SU1ES03\nCisco Cisco Unified Contact Center Express 11.6(1)ES02\nCisco Cisco Unified Contact Center Express 11.5(1)ES01\nCisco Cisco Unified Contact Center Express 10.6(1)SU2\nCisco Cisco Unified Contact Center Express 10.6(1)SU2ES04\nCisco Cisco Unified Contact Center Express 11.6(1)ES01\nCisco Cisco Unified Contact Center Express 10.6(1)SU3ES02\nCisco Cisco Unified Contact Center Express 11.5(1)SU1ES02\nCisco Cisco Unified Contact Center Express 11.5(1)SU1ES01\nCisco Cisco Unified Contact Center Express 11.0(1)SU1ES02\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES03\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES04\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES05\nCisco Cisco Unified Contact Center Express UCCX 15.0.1\nCisco Cisco Unified Contact Center Express 12.5(1)_SU03_ES06",
    "sourceHref": "",
    "cvss": {
        "score": 4.9,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Cisco Unified Contact Center Express",
    "version": "10.5(1)SU1",
    "vendor": "Cisco",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}