PT-2025-45130 · Cisco · Ccx Editor+1

Published 2025-11-05 · Updated 2026-01-16 · CVE-2025-20358

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Unified CCX versions (affected versions not specified)

Description A flaw exists in the Contact Center Express (CCX) Editor application that could allow a remote attacker to circumvent authentication and gain administrative privileges related to script creation and execution. This is caused by inadequate authentication processes during communication between the CCX Editor and a Unified CCX server. An attacker could redirect the authentication process to a malicious server, deceiving the CCX Editor into accepting a fraudulent authentication. Successful exploitation could enable the attacker to create and execute arbitrary scripts on the operating system of the affected Unified CCX server, operating as an internal, non-root user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2025-14816

CVE-2025-20358

Affected Products

Ccx Editor

Cisco Unified Ccx

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-20358 · Security Note
• https://bdu.fstec.ru/vul/2025-14816 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-unauth-rce-QeN8h7mQ · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20358 · Vendor Advisory
• https://reddit.com/r/Action1/comments/1piftm3/december_2025_patch_tuesday_overview · Reddit Post
• https://t.me/cveNotify/142114 · Telegram Post
• https://twitter.com/rapidskillup/status/2001653725924905461 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1986931675532501226 · Twitter Post
• https://reddit.com/r/Action1/comments/1pifro1/december_2025_patch_tuesday_overview · Reddit Post