Cisco Unified Contact Center Express Vulnerabilities Enables Remote Code Execution Attacks

Cisco published a critical advisory for two vulnerabilities in Unified Contact Center Express (CVE-2025-20354 and CVE-2025-20358) that enable unauthenticated remote code execution via Java RMI and an authentication bypass in the CCX Editor allowing admin script execution. Both flaws carry high CVSS scores (9.8 and 9.4), affect Unified CCX 12.5 SU3 and earlier and 15.0, and have fixes released (12.5 SU3 ES07 and 15.0 ES01); Cisco recommends immediate upgrading and currently reports no known public exploitation.