Cisco Finesse Desktop and Unified Contact Center Express Privilege Gain Vulnerability

Cisco Finesse Desktop and Unified Contact Center Express Unified CCX are both products of Cisco, Inc.Cisco Finesse Desktop is a suite of software for next-generation agent and desktop management in customer collaboration solutions; Unified CCX is a customer relationship management component of a...

PQI Air Pen Express Remote Detection

Detection of installed version of PQI Air Pen Express. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Code injection

Cisco Unified Communications Manager aka CallManager 9.12.10000.28, 10.52.10000.5, 10.52.12901.1, and 11.01.10000.10; Unified Communications Manager IM & Presence Service 10.52; Unified Contact Center Express 11.01; and Unity Connection 10.52 store a cleartext encryption key, which allows local...

PT-2016-1263

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 9.12.10000.28 through 11.01.10000.10 Unified Communications Manager IM & Presence Service version 10.52 Unified Contact Center Express version 11.01 Unity Connection version 10.52 Description The...

CVE-2016-1307

The Openfire server in Cisco Finesse Desktop 10.51 and 11.01 and Unified Contact Center Express 10.61 has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085...

Hardcoded credentials

The Openfire server in Cisco Finesse Desktop 10.51 and 11.01 and Unified Contact Center Express 10.61 has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085...

CVE-2016-1307

CVE-2016-1307 affects Cisco Finesse Desktop and Cisco Unified Contact Center Express Openfire server. A default, non-changeable XMPP account enables unauthenticated remote login to the Openfire service, allowing access via XMPP with a non-administrative account. Cisco’s advisory Cisco Security Ad...

CVE-2016-1307

The Openfire server in Cisco Finesse Desktop 10.51 and 11.01 and Unified Contact Center Express 10.61 has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085...

CVE-2016-1307: Improper Authentication

The Openfire server in Cisco Finesse Desktop 10.51 and 11.01 and Unified Contact Center Express 10.61 has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085...

PT-2016-4699

Name of the Vulnerable Software and Affected Versions Cisco Finesse Desktop versions 10.51 through 11.01 Unified Contact Center Express version 10.61 Description The issue concerns a hardcoded account in the Openfire server, which can be exploited by remote attackers to gain access via an XMPP...

lmra.bh XSS vulnerability

Vulnerable URL: http://lmra.bh/portal/en/expressservices/index Details: Description| Value ---|--- Patched:| Yes, at 04.05.2016 Latest check for patch:| 04.05.2016 07:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 105548 Google Pagerank| 0 VIP website status...

CVE-2016-1298

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Contact Center Express 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Contact Center Express 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033...

PT-2016-4691

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express versions 10.01 through 11.01 Description The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to permalinks. Recommendations For versions 10.01 through 11.01, update ...

CVE-2016-1298: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Contact Center Express 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033...

Oracle Database Server Multiple Unspecified Vulnerabilities -07 (Jan 2016)

Oracle Database Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Database Server Unspecified Vulnerability -04 (Jan 2016)

Oracle Database Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Threat Outbreak Alert RuleID20606: Email Messages Distributing Malicious Software on January 21, 2016

Medium Alert ID: 43139 First Published: 2016 January 21 19:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20606 may contain the following files: Name |...

www295.americanexpress.com XSS vulnerability

Vulnerable URL: https://www295.americanexpress.com/cards/leavingblank.jsp?url=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 21.01.2016 Latest check for patch:| 21.01.2016 13:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

www295.americanexpress.com Open Redirect vulnerability

Vulnerable URL: https://www295.americanexpress.com/cards/leavingblank.jsp?url=http://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 09.06.2017 Latest check for patch:| 09.06.2017 07:19 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...