Lucene search
+L

15 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/19 12:00 a.m.•6 views

CVE-2026-20314: Server-Side Request Forgery (SSRF)

A vulnerability in Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper inpu...

5CVSS6AI score0.00436EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/11 12:00 a.m.•5 views

CVE-2026-20116: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Finesse, Cisco Packaged Contact Center Enterprise Packaged CCE, Cisco Unified Contact Center Enterprise Unified CCE, Cisco Unified Contact Center Express Unified CCX, and Cisco Unified Intelligence Center could allow an...

6.1CVSS6.7AI score0.00216EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/21 5:16 p.m.•27 views

CVE-2026-20109

Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-base...

4.8CVSS0.00202EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/21 4:26 p.m.•55 views

CVE-2026-20055

Cisco CVE-2026-20055 affects the web-based management interfaces of Packaged CCE and Unified CCE. The issue is cross-site scripting (XSS) due to insufficient input validation in the interface pages. An authenticated attacker with administrative credentials could inject script code and potentially...

4.8CVSS6.1AI score0.00202EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/21 12:00 a.m.•4 views

CVE-2026-20055: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-base...

4.8CVSS6.1AI score0.00202EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/21 12:00 a.m.•8 views

CVE-2026-20109: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-base...

4.8CVSS6.1AI score0.00202EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2018-1267

Malware in sbrugna...

6.1CVSS6.3AI score0.0042EPSS
SaveExploits0References2
NVD
NVD
•added 2018/10/05 2:29 p.m.•31 views

CVE-2018-0444

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the...

6.1CVSS6.3AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2018/10/05 2:29 p.m.•24 views

CVE-2018-0445

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-bas...

8.8CVSS8.7AI score0.00566EPSS
SaveExploits0References1
Prion
Prion
•added 2018/10/05 2:29 p.m.•29 views

Input validation

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the...

5.8CVSS6.2AI score0.0042EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2018/10/05 2:00 p.m.•18 views

CVE-2018-0445 Cisco Packaged Contact Center Enterprise Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-bas...

7.2AI score0.00566EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/05 12:00 a.m.•7 views

CVE-2018-0445: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-bas...

8.8CVSS7.9AI score0.00566EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/05 12:00 a.m.•5 views

CVE-2018-0444: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the...

6.1CVSS6.6AI score0.0042EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/10/05 12:00 a.m.•6 views

PT-2018-8833

Name of the Vulnerable Software and Affected Versions Cisco Packaged Contact Center Enterprise affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a CSRF attack and perform arbitrary actions o...

8.8CVSS0.00566EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/10/05 12:00 a.m.•5 views

PT-2018-8832

Name of the Vulnerable Software and Affected Versions Cisco Packaged Contact Center Enterprise affected versions not specified Description A stored XSS attack could be conducted by an unauthenticated, remote attacker against a user of the web-based management interface. This issue arises from...

6.1CVSS0.0042EPSS
SaveExploits0References3
Rows per page
Query Builder