The vulnerability in the web interface of the Cisco Unified Contact Center Express software’s operator management tool allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the web interface for managing the software used to automate operations in Cisco Unified Contact Center Express Unified CCX is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to enhance their privileges and...