Vulnerability Database

296,138

Total vulnerabilities in the database

CVE-2025-20278

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user.

This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.

  • Published: Jun 4, 2025
  • Updated: Jun 5, 2025
  • CVE: CVE-2025-20278
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.7
  • AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
cisco / finesse 10.5(1)_es2 10.5(1)_es2.x
cisco / finesse 10.5(1)_es1 10.5(1)_es1.x
cisco / finesse 10.5(1)_es4 10.5(1)_es4.x
cisco / finesse 10.5(1)_es3 10.5(1)_es3.x
cisco / finesse 11.6(1) 11.6(1).x
cisco / finesse 12.0(1) 12.0(1).x
cisco / finesse 12.0(1)-es1 12.0(1)-es1.x
cisco / finesse 12.0(1)-es2 12.0(1)-es2.x
cisco / finesse 12.0(1)-es3 12.0(1)-es3.x
cisco / finesse 12.0(1)-es4 12.0(1)-es4.x
cisco / finesse 12.0(1)-es5 12.0(1)-es5.x
cisco / finesse 12.5(1) 12.5(1).x
cisco / finesse 12.5(1)-es1 12.5(1)-es1.x
cisco / finesse 12.5(1)-es2 12.5(1)-es2.x
cisco / finesse 12.5(1)-es3 12.5(1)-es3.x
cisco / finesse 12.5(1)-es4 12.5(1)-es4.x
cisco / finesse 12.6(1)-es02 12.6(1)-es02.x
cisco / finesse 12.6(1)-es03 12.6(1)-es03.x
cisco / finesse 10.5(1)_es6 10.5(1)_es6.x
cisco / finesse 10.5(1)_es10 10.5(1)_es10.x
cisco / finesse 10.5(1)_es7 10.5(1)_es7.x
cisco / finesse 10.5(1) 10.5(1).x
cisco / finesse 10.5(1)_es5 10.5(1)_es5.x
cisco / finesse 12.5(2) 12.5(2).x
cisco / finesse 10.5(1)_es8 10.5(1)_es8.x
cisco / finesse 10.5(1)_es9 10.5(1)_es9.x
cisco / finesse 11.6(1)_fips 11.6(1)_fips.x
cisco / finesse 11.0(1) 11.0(1).x
cisco / finesse 11.0(1)-es1 11.0(1)-es1.x
cisco / finesse 11.0(1)-es2 11.0(1)-es2.x
cisco / finesse 11.0(1)-es3 11.0(1)-es3.x
cisco / finesse 11.0(1)-es4 11.0(1)-es4.x
cisco / finesse 11.6(1)-es4 11.6(1)-es4.x
cisco / finesse 11.6(1)-es5 11.6(1)-es5.x
cisco / finesse 11.6(1)-es6 11.6(1)-es6.x
cisco / finesse 11.6(1)-es7 11.6(1)-es7.x
cisco / finesse 11.6(1)-es8 11.6(1)-es8.x
cisco / finesse 12.6(1) 12.6(1).x
cisco / finesse 12.6(1)-es01 12.6(1)-es01.x
cisco / finesse 12.6(2) 12.6(2).x
cisco / finesse 12.6(2)-es01 12.6(2)-es01.x
cisco / finesse 12.6(2)-es02 12.6(2)-es02.x
cisco / finesse 11.0(1)-es5 11.0(1)-es5.x
cisco / finesse 11.0(1)-es6 11.0(1)-es6.x
cisco / finesse 11.0(1)-es7 11.0(1)-es7.x
cisco / finesse 11.5(1) 11.5(1).x
cisco / finesse 11.5(1)-es1 11.5(1)-es1.x
cisco / finesse 11.5(1)-es2 11.5(1)-es2.x
cisco / finesse 11.5(1)-es3 11.5(1)-es3.x
cisco / finesse 11.5(1)-es4 11.5(1)-es4.x
cisco / finesse 11.5(1)-es5 11.5(1)-es5.x
cisco / finesse 11.5(1)-es6 11.5(1)-es6.x
cisco / finesse 11.6(1)-es2 11.6(1)-es2.x
cisco / finesse 11.6(1)-es3 11.6(1)-es3.x
cisco / finesse 11.6(1)-es9 11.6(1)-es9.x
cisco / finesse 11.6(1)-es10 11.6(1)-es10.x
cisco / finesse 11.6(1)-es11 11.6(1)-es11.x
cisco / finesse 11.6(1)-es1 11.6(1)-es1.x
cisco / finesse 12.0(1)-es6 12.0(1)-es6.x
cisco / finesse 12.0(1)-es7 12.0(1)-es7.x
cisco / finesse 12.0(1)-es8 12.0(1)-es8.x
cisco / finesse 12.5(1)-su 12.5(1)-su.x
cisco / finesse 12.5(1)-su_es1 12.5(1)-su_es1.x
cisco / finesse 12.5(1)-su_es2 12.5(1)-su_es2.x
cisco / finesse 12.5(1)-su_es3 12.5(1)-su_es3.x
cisco / finesse 12.5(1)-es5 12.5(1)-es5.x
cisco / finesse 12.5(1)-es6 12.5(1)-es6.x
cisco / finesse 12.5(1)-es7 12.5(1)-es7.x
cisco / finesse 12.5(1)-es8 12.5(1)-es8.x
cisco / finesse 12.6(1)-es04 12.6(1)-es04.x
cisco / finesse 12.6(1)-es05 12.6(1)-es05.x
cisco / finesse 12.6(1)-es06 12.6(1)-es06.x
cisco / finesse 12.6(1)-es07 12.6(1)-es07.x
cisco / finesse 12.6(1)-es07_et 12.6(1)-es07_et.x
cisco / finesse 12.6(1)-es08 12.6(1)-es08.x
cisco / finesse 12.6(1)-es09 12.6(1)-es09.x
cisco / finesse 12.6(1)-es10 12.6(1)-es10.x
cisco / finesse 12.6(1)-es11 12.6(1)-es11.x
cisco / finesse 12.6(2)-es03 12.6(2)-es03.x
cisco / finesse 12.6(2)-es04 12.6(2)-es04.x
cisco / finesse 12.6(2)-es05 12.6(2)-es05.x
cisco / socialminer 11.5(1) 11.5(1).x
cisco / socialminer 11.6(1) 11.6(1).x
cisco / socialminer 11.6(2) 11.6(2).x
cisco / socialminer 12.0(1) 12.0(1).x
cisco / socialminer 10.5(1) 10.5(1).x
cisco / socialminer 10.6(1) 10.6(1).x
cisco / socialminer 10.6(2) 10.6(2).x
cisco / socialminer 12.5(1)es01 12.5(1)es01.x
cisco / socialminer 12.0(1)es04 12.0(1)es04.x
cisco / socialminer 12.5(1) 12.5(1).x
cisco / socialminer 12.0(1)es02 12.0(1)es02.x
cisco / socialminer 11.0(1) 11.0(1).x
cisco / socialminer 11.5(1)su1 11.5(1)su1.x
cisco / socialminer 12.0(1)es03 12.0(1)es03.x
cisco / socialminer 12.5(1)su3 12.5(1)su3.x
cisco / socialminer 12.5(1)su1 12.5(1)su1.x
cisco / socialminer 12.5(1)su2 12.5(1)su2.x
cisco / unified_communications_manager 12.5(1) 12.5(1).x
cisco / unified_communications_manager 12.5(1)su7 12.5(1)su7.x
cisco / unified_communications_manager 12.5(1)su2 12.5(1)su2.x
cisco / unified_communications_manager 12.5(1)su4 12.5(1)su4.x
cisco / unified_communications_manager 12.5(1)su3 12.5(1)su3.x
cisco / unified_communications_manager 12.5(1)su5 12.5(1)su5.x
cisco / unified_communications_manager 12.5(1)su1 12.5(1)su1.x
cisco / unified_communications_manager 12.5(1)su6 12.5(1)su6.x
cisco / unified_communications_manager 12.5(1)su7a 12.5(1)su7a.x
cisco / unified_communications_manager 12.5(1)su8 12.5(1)su8.x
cisco / unified_communications_manager 12.5(1)su8a 12.5(1)su8a.x
cisco / unified_communications_manager 12.5(1)su9 12.5(1)su9.x
cisco / unified_communications_manager_im_and_presence_service 12.5(1) 12.5(1).x
cisco / unified_communications_manager_im_and_presence_service 12.5(1)su1 12.5(1)su1.x
cisco / unified_communications_manager_im_and_presence_service 12.5(1)su2 12.5(1)su2.x
cisco / unified_communications_manager_im_and_presence_service 12.5(1)su3 12.5(1)su3.x
cisco / unified_communications_manager_im_and_presence_service 12.5(1)su4 12.5(1)su4.x
cisco / unified_communications_manager_im_and_presence_service 12.5(1)su5 12.5(1)su5.x
cisco / unified_communications_manager_im_and_presence_service 12.5(1)su6 12.5(1)su6.x
cisco / unified_communications_manager_im_and_presence_service 12.5(1)su7 12.5(1)su7.x
cisco / unified_communications_manager_im_and_presence_service 12.5(1)su8 12.5(1)su8.x
cisco / unified_communications_manager_im_and_presence_service 12.5(1)su9 12.5(1)su9.x
cisco / unified_contact_center_express 10.5(1) 10.5(1).x
cisco / unified_contact_center_express 10.6(1) 10.6(1).x
cisco / unified_contact_center_express 12.5(1) 12.5(1).x
cisco / unified_contact_center_express 12.0(1) 12.0(1).x
cisco / unified_contact_center_express 11.6(1) 11.6(1).x
cisco / unified_contact_center_express 11.6(2) 11.6(2).x
cisco / unified_contact_center_express 10.5(1)su1 10.5(1)su1.x
cisco / unified_contact_center_express 10.6(1)su3 10.6(1)su3.x
cisco / unified_contact_center_express 10.0(1)su1 10.0(1)su1.x
cisco / unified_contact_center_express 10.6(1)su1 10.6(1)su1.x
cisco / unified_contact_center_express 11.0(1)su1 11.0(1)su1.x
cisco / unified_contact_center_express 10.6(1)su3es03 10.6(1)su3es03.x
cisco / unified_contact_center_express 10.6(1)su3es01 10.6(1)su3es01.x
cisco / unified_contact_center_express 10.5(1)su1es10 10.5(1)su1es10.x
cisco / unified_contact_center_express 10.0(1)su1es04 10.0(1)su1es04.x
cisco / unified_contact_center_express 10.6(1)su2 10.6(1)su2.x
cisco / unified_contact_center_express 10.6(1)su2es04 10.6(1)su2es04.x
cisco / unified_contact_center_express 10.6(1)su3es02 10.6(1)su3es02.x
cisco / unified_contact_center_express 11.5(1)su1 11.5(1)su1.x
cisco / unified_contact_center_express 12.5(1)_su01_es02 12.5(1)_su01_es02.x
cisco / unified_contact_center_express 12.5(1)_su01_es03 12.5(1)_su01_es03.x
cisco / unified_contact_center_express 11.6(2)es07 11.6(2)es07.x
cisco / unified_contact_center_express 11.6(2)es08 11.6(2)es08.x
cisco / unified_contact_center_express 12.5(1)_su01_es01 12.5(1)_su01_es01.x
cisco / unified_contact_center_express 12.0(1)es04 12.0(1)es04.x
cisco / unified_contact_center_express 11.6(2)es06 11.6(2)es06.x
cisco / unified_contact_center_express 12.0(1)es03 12.0(1)es03.x
cisco / unified_contact_center_express 12.0(1)es01 12.0(1)es01.x
cisco / unified_contact_center_express 11.6(2)es05 11.6(2)es05.x
cisco / unified_contact_center_express 12.0(1)es02 12.0(1)es02.x
cisco / unified_contact_center_express 11.6(2)es04 11.6(2)es04.x
cisco / unified_contact_center_express 11.6(2)es03 11.6(2)es03.x
cisco / unified_contact_center_express 11.6(2)es02 11.6(2)es02.x
cisco / unified_contact_center_express 11.6(2)es01 11.6(2)es01.x
cisco / unified_contact_center_express 11.0(1)su1es03 11.0(1)su1es03.x
cisco / unified_contact_center_express 11.5(1)su1es03 11.5(1)su1es03.x
cisco / unified_contact_center_express 11.6(1)es02 11.6(1)es02.x
cisco / unified_contact_center_express 11.5(1)es01 11.5(1)es01.x
cisco / unified_contact_center_express 11.6(1)es01 11.6(1)es01.x
cisco / unified_contact_center_express 11.5(1)su1es02 11.5(1)su1es02.x
cisco / unified_contact_center_express 11.5(1)su1es01 11.5(1)su1es01.x
cisco / unified_contact_center_express 11.0(1)su1es02 11.0(1)su1es02.x
cisco / unified_contact_center_express 12.5(1)su1 12.5(1)su1.x
cisco / unified_contact_center_express 12.5(1)su2 12.5(1)su2.x
cisco / unified_contact_center_express 12.5(1)su3 12.5(1)su3.x
cisco / unified_contact_center_express 12.5(1)_su03_es01 12.5(1)_su03_es01.x
cisco / unified_contact_center_express 12.5(1)_su03_es02 12.5(1)_su03_es02.x
cisco / unified_contact_center_express 12.5(1)_su02_es03 12.5(1)_su02_es03.x
cisco / unified_contact_center_express 12.5(1)_su02_es04 12.5(1)_su02_es04.x
cisco / unified_contact_center_express 12.5(1)_su02_es02 12.5(1)_su02_es02.x
cisco / unified_contact_center_express 12.5(1)_su02_es01 12.5(1)_su02_es01.x
cisco / unified_contact_center_express 12.5(1)es02 12.5(1)es02.x
cisco / unified_contact_center_express 12.5(1)es03 12.5(1)es03.x
cisco / unified_contact_center_express 12.5(1)es01 12.5(1)es01.x
cisco / unified_contact_center_express 9.0(2)su3es04 9.0(2)su3es04.x
cisco / unified_contact_center_express 8.5(1) 8.5(1).x
cisco / unified_contact_center_express 12.5(1)_su03_es03 12.5(1)_su03_es03.x
cisco / unified_contact_center_express 12.5(1)_su03_es04 12.5(1)_su03_es04.x
cisco / unified_contact_center_express 12.5(1)_su03_es05 12.5(1)_su03_es05.x
cisco / unified_contact_center_express 12.5(1)_su03_es06 12.5(1)_su03_es06.x
cisco / unified_intelligence_center - 12.6\(2\)es_04
cisco / unity_connection 12.5(1) 12.5(1).x
cisco / unity_connection 12.5(1)su7 12.5(1)su7.x
cisco / unity_connection 12.5(1)su8 12.5(1)su8.x
cisco / unity_connection 12.5(1)su6 12.5(1)su6.x
cisco / unity_connection 12.5(1)su1 12.5(1)su1.x
cisco / unity_connection 12.5(1)su2 12.5(1)su2.x
cisco / unity_connection 12.5(1)su3 12.5(1)su3.x
cisco / unity_connection 12.5(1)su4 12.5(1)su4.x
cisco / unity_connection 12.5(1)su5 12.5(1)su5.x
cisco / unity_connection 12.5(1)su8a 12.5(1)su8a.x
cisco / unity_connection 12.5(1)su9 12.5(1)su9.x
cisco / virtualized_voice_browser - 12.6\(2\)es06