This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Cisco fixes 8 vulnerabilities in various products
Cisco is fixing 8 vulnerabilities in various products. The most serious of them are listed below and the remaining ones at [1][2]. Individual products and their fixed versions: Cisco Unified Contact Center Express (Unified CCX) [1] - 12.5 SU3 ES07, 15.0 ES01 Cisco Unified Intelligence Center (CUIC) [1] - 12.6(02) ES06 (Dec 2025), 15.0(01) ES202508 Cisco Identity Services Engine (ISE) [2] - 3.2 Patch 8 (Dec 2025), 3.3 Patch 8, 3.4 Patch 4 Cisco ISE Passive Identity Connector (ISE-PIC) [2] - 3.2 Patch 8 (Dec 2025), 3.3 Patch 8, 3.4 Patch 4
An authenticated remote attacker with administrator privileges can exploit insufficient input validation tied to specific elements of the web interface in Cisco Unified CCX, upload and execute a malicious file and thus gain access to the operating system [1].
The vulnerability is present in product:
- Cisco Unified CCX; <12.5 SU3 ES07; >=15.0, <15.0 ES01;
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
More information:
- CVE-2025-20375 at cve.org, NVD
- CWE-434: Unrestricted Upload of File with Dangerous Type at cwe.mitre.org
The vulnerability was publicly disclosed 18. 11. 2025.
An authenticated remote attacker with administrator privileges can exploit insufficient input validation related to file uploads in the web interface of Cisco Unified CCX, upload and execute a malicious file, which may lead to execution of arbitrary commands and obtaining root privileges [1].
The vulnerability is present in product:
- Cisco Unified CCX; <12.5 SU3 ES07; >=15.0, <15.0 ES01;
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
More information:
- CVE-2025-20376 at cve.org, NVD
- CWE-434: Unrestricted Upload of File with Dangerous Type at cwe.mitre.org
The vulnerability was publicly disclosed 18. 11. 2025.
An authenticated remote attacker with low privileges can exploit insufficient validation of user input in the web interface of Cisco ISE and Cisco ISE-PIC, which may lead to a reflected XSS attack [2].
The vulnerability is present in product:
- Cisco Identity Services Engine; <3.2 Patch 8; >=3.3, <3.3 Patch 8; >=3.4, <3.4 Patch 4;
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
More information:
- CVE-2025-20303 at cve.org, NVD
- CVE-2025-20304 at cve.org, NVD
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') at cwe.mitre.org
The vulnerability was publicly disclosed 18. 11. 2025.
Due to insufficient validation of requests sent to specific API endpoints of the subsystem in Cisco Unified Intelligence Center (CUIC), an authenticated remote attacker with a low privilege level can obtain sensitive information [1].
The vulnerability is present in product:
- Cisco Unified Intelligence Center(CUIC); <12.6 (02) ES06 (Dec 2025); >=15.0, <15.0(01) ES202508
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
More information:
- CVE-2025-20377 at cve.org, NVD
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor at cwe.mitre.org
The vulnerability was publicly disclosed 18. 11. 2025.
Links
By CESNET, z.s.p.o. Henrieta Paločková on 21. 11. 2025.