Cisco has patched vulnerabilities in the Unified Contact Center Express.

Cisco patched two critical vulnerabilities in its Unified Contact Center Express software that could allow unauthenticated attackers to execute remote code and gain root access. One flaw involved improper authentication in the Java RMI process, while the other exploited weaknesses in the CCX Editor’s communication flow. Additional patches addressed a high-severity denial-of-service bug in Cisco Identity Services Engine and several medium-severity flaws across other Cisco products.

Read more:

https://www.securityweek.com/cisco-patches-critical-vulnerabilities-in-contact-center-appliance/