Cisco Unified Intelligence Center Command Execution Privilege Escalation

The vulnerability in the web interface for creating reports using the Cisco Unified Intelligence Center and the Cisco Unified Contact Center Express software lies in the unlimited download of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and...

Cisco Finesse SSRF

The vulnerability in the web interface for controlling the automation software of Cisco Finesse operators is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack using a specially created HTTP request...

Cisco Unified Intelligence Center XSS

The vulnerability in the web interface for creating reports using the Cisco Unified Intelligence Center and the Cisco Unified Contact Center Express software lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform...

Cisco Finesse XSS

The vulnerability in the web interface of the Cisco Finesse software automation tool for operator operations is related to the lack of protective measures taken for the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remote...

Cisco Finesse Input Validation Unauthorized Access

The vulnerability of the Cisco Finesse operator automation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the system and perform unauthorized actions by sending a specially crafted web...