CVE-2025-20374 Cisco Unified Contact Center Express Arbitrary File Download Vulnerability

Medium 4.9 Published 5 Nov 2025 Updated 5 Nov 2025

An authenticated attacker with admin credentials can exploit insufficient input validation in the web UI to read arbitrary files on the underlying operating system.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-20374?

CVE-2025-20374 is a medium-severity path traversal vulnerability in Cisco Unified Contact Center Express, published on 5 Nov 2025. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary resources. This vulnerability is due to an insufficient input validation associated to specific UI features. An attacker could exploit this vulnerability by sending a crafted request to the web UI. A successful exploit could allow the attacker to gain read access to arbitrary files on the underlying operating system. To exploit this vulnerability, the attacker must have valid administrative credentials.

Weakness: CWE-22

Which versions are affected by CVE-2025-20374?

It affects 1 product.

Products include Cisco Unified Contact Center Express.

How do I fix CVE-2025-20374?

No fix has been published for CVE-2025-20374 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2025-20374 being exploited?

There is no known exploitation of CVE-2025-20374 in the wild and no public exploit code.

Sources

Also known as GHSA-gp2g-3xx9-59fw.