9.8
Critical
CVE-2020-3280 A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could…
Description
A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit this vulnerability by sending a malicious serialized Java object to a specific listener on an affected system. A successful exploit could allow the attacker to execute arbitrary code as the root user on an affected device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Unified Contact Center Express | Versions not published |
Other CVEs of Cisco Unified Contact Center Express
The 36 CVEs of Cisco Unified Contact Center Express →
CVE-2026-20117
A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could…
6.1
Medium
CVE-2026-20116
A vulnerability in the web-based management interface of Cisco Finesse, Cisco Packaged Contact Center Enterprise…
6.1
Medium
CVE-2025-20377
A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote…
4.3
Medium
CVE-2025-20375
Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability
6.5
Medium