Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-93334
HistoryAug 18, 2023 - 12:00 a.m.

Cisco Unified Contact Center Express Input Validation Error Vulnerability (CNVD-2023-93334)

2023-08-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
cisco
contact center express
input validation error
http requests
web cache poisoning
vulnerability

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.0%

Cisco Unified Contact Center Express (Unified CCX) is a customer relationship management component of a unified communications solution from Cisco. The component supports features such as self-service voice, call distribution, and customer access control. An input validation error vulnerability exists in Cisco Unified Contact Center Express, which arises from improper input validation of HTTP requests and can be exploited by an unauthenticated, remote attacker to launch a Web cache poisoning attack on an affected device.

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.0%

Related for CNVD-2023-93334