CVE-2025-20374

A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary resources. This vulnerability is due to an insufficient input validation associated to specific UI features. An attacker could exploit this vulnerability by sending a crafted request to the web UI. A successful exploit could allow the attacker to gain read access to arbitrary files on the underlying operating system. To exploit this vulnerability, the attacker must have valid administrative credentials.

• CWE-22

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-mult-vuln-gK4TFXSnVendor Advisory

Published

Nov 5, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20368In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8,…5.4
• CVE-2025-20369In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8,…6.5
• CVE-2025-2037A vulnerability was found in code-projects Blood Bank Manage…8.8
• CVE-2025-20370In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, an…4.9
• CVE-2025-20371In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and…8.8
• CVE-2025-20373In Splunk Add-on for Palo Alto Networks versions below 2.0.2…2.7
• CVE-2025-20375A vulnerability in the web UI of Cisco Unified CCX could all…7.2
• CVE-2025-20376A vulnerability in the web UI of Cisco Unified CCX could all…7.2
• CVE-2025-20377A vulnerability in the API subsystem of Cisco Unified Intell…4.3
• CVE-2025-20378In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.…6.1
• CVE-2025-20379In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, an…3.5
• CVE-2025-2038A vulnerability was found in code-projects Blood Bank Manage…7.3