Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack and obtain potentially confidential information by leveraging a flaw in the authentication mechanism. For more information...

CVE-2021-1245 Cisco Finesse OpenSocial Gadget Editor Cross-Site Scripting Vulnerability

Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in the web-based management interface of Cisco Finesse and Cisco Unified CVP could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user ...

CVE-2021-1245

The CVE-2021-1245 entry concerns Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor. The connected Cisco advisory sources confirm an XSS vulnerability in the web-based management interface caused by improper input validation. An unauthenticated, remote attacker can lure a user to click ...

CVE-2021-1245 Cisco Finesse OpenSocial Gadget Editor Cross-Site Scripting Vulnerability

Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in the web-based management interface of Cisco Finesse and Cisco Unified CVP could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user ...

CVE-2021-1246 Cisco Finesse OpenSocial Gadget Editor Unauthenticated Access Vulnerability

Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerability in the web management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP could allow an unauthenticated, remote...

CVE-2021-1246 Cisco Finesse OpenSocial Gadget Editor Unauthenticated Access Vulnerability

Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerability in the web management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP could allow an unauthenticated, remote...

CVE-2021-1246

Cisco CVE-2021-1246 refers to an unauthenticated access vulnerability in the web management interfaces of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor. The issue arises from missing authentication in a particular section of the web-based managemen...

Multiple Cisco Products OpenSocial Gadget Editor Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified Customer Voice Portal CVP could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack and obtain potentially confidential informatio...

Cisco Finesse 跨站脚本漏洞

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. Cisco Finesse suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client data in the WEB application, which can be exploited by an attacker to execute client...

Cisco Finesse 跨站脚本漏洞

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in the Web management interface of Cisco Finesse versions prior to 12.0 ES05, 12.5 ES05, which can be exploited by a remote authenticated attacker to execute...

PT-2021-1632 · Cisco · Cisco Unified Cvp +1

Name of the Vulnerable Software and Affected Versions: Cisco Finesse and Cisco Unified CVP affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Finesse and Cisco Unified CVP could allow an unauthenticated, remote attacker to conduct a...

The vulnerability in the web interface of the Cisco Finesse software, which allows a hacker to perform cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Finesse software automation tool for operator operations is related to the lack of protective measures taken for the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remote...

The vulnerability in the web interface of the Cisco Finesse automation software allows a attacker to execute arbitrary code in the context of the current user, or to disclose protected information.

The vulnerability in the web interface for controlling the automation software for Cisco Finesse operators exists because measures are not taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current...

Cisco Finesse Cross-Site Scripting Vulnerability (CNVD-2020-10505)

Cisco Finesse is a next-generation seat and supervisor desktop designed to provide a collaborative experience for the diverse communities that interact with your customer service organization. A cross-site scripting vulnerability exists in the Web management interface of Cisco Finesse versions...

CVE-2020-3159

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of...

CVE-2020-3159

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of...

CVE-2020-3159 Cisco Finesse Web-Based Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of...

CVE-2020-3159

CVE-2020-3159 affects Cisco Finesse: a cross-site scripting vulnerability in the Web-based management interface due to insufficient validation of user-supplied input. An unauthenticated, remote attacker could entice a user to click a crafted link and execute script code within the interface conte...

CVE-2020-3159 Cisco Finesse Web-Based Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of...