Cisco Finesse Server-Side Request Forgery (cisco-sa-20180718-finesse)

According to its self-reported version, Cisco Finesse Software is affected a vulnerability in the web-based management interface, which could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack. Please see the included Cisco BIDs and Cisco Security...

Cisco Finesse Appliance Multiple Cross-Site Scripting Vulnerabilities (Cisco-SA-20150818-CVE-2015-4310)

According to its self-reported version, the Cisco Finesse appliance is affected by multiple cross-site scripting XSS vulnerabilities exist due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to...

Cisco Finesse Unauthorized Access (cisco-sa-20171115-vos)

According to its self-reported version, the Cisco Finesse Software is affected by an unauthorized access vulnerability. The vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote...

Cisco Finesse Appliance Detection (SSH)

Binary data ciscovossfinesseinstalled.nbin...

The vulnerability of the Cisco Finesse operator automation software lies in insufficient validation of input data, allowing a perpetrator to gain access to the system and perform unauthorized actions.

The vulnerability of the Cisco Finesse operator automation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the system and perform unauthorized actions by sending a specially crafted web...

CVE-2019-12632

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker...

CVE-2019-12632

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker...

Server side request forgery (ssrf)

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker...

CVE-2019-12632 Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker...

CVE-2019-12632 Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker...

CVE-2019-12632

CVE-2019-12632 corresponds to a Cisco Finesse SSRF vulnerability: unauthenticated, remote attacker can bypass access controls via improper input validation to perform server-side requests. Affected product: Cisco Finesse (server-side processing component). Root cause: inadequate validation of use...

Cisco Finesse Input Validation Error Vulnerability

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. An input validation error vulnerability exists in Cisco Finesse. An attacker could exploit this vulnerability to gain access to the system and perform unauthorized operations...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker...

Linux Kernel CVE-2018-5391 Remote Denial of Service Vulnerability

Description Linux Kernel is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Arista Extendible Operating System EOS 4.20.0F Arista Extendible Operating System EOS 4.20.1F Arista Extendible Operating...

Cisco Finesse Server-Side Information Disclosure Vulnerability

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. The software enhances call center service quality, improves customer experience, and increases agent satisfaction. An information disclosure vulnerability exists in the web-based administration page in...

Cisco Finesse Server-Side Request Forgery Vulnerability (CNVD-2018-14233)

Cisco Finesse is a suite of call center management software. The software enhances call center service quality, improves customer experience, and increases agent satisfaction. Cisco Finesse suffers from a server-side request forgery vulnerability in the web-based administration pages, which stems...

CVE-2018-0399

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected system. Cisco Bug IDs: CSCvg71044...

CVE-2018-0399

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected system. Cisco Bug IDs: CSCvg71044...

CVE-2018-0398

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack. Cisco Bug IDs: CSCvg71018...