CVE-2023-20096

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express Unified CCX could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. This vulnerability is due to insufficient input validation of user-supplied data. An attacke...

CVE-2023-20096

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express Unified CCX could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. This vulnerability is due to insufficient input validation of user-supplied data. An attacke...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express Unified CCX could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. This vulnerability is due to insufficient input validation of user-supplied data. An attacke...

PT-2023-2210 · Cisco · Cisco Unified Contact Center Express

Name of the Vulnerable Software and Affected Versions: Cisco Unified Contact Center Express Unified CCX affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS...

CVE-2023-20096 Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express Unified CCX could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. This vulnerability is due to insufficient input validation of user-supplied data. An attacke...

CVE-2023-20096

Cisco Unified Contact Center Express (Unified CCX) contains a stored Cross-Site Scripting (XSS) vulnerability in its web-based management interface due to insufficient input validation. An authenticated, remote attacker could inject crafted input into various management fields to execute scripts ...

CVE-2023-20096 Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express Unified CCX could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. This vulnerability is due to insufficient input validation of user-supplied data. An attacke...

The vulnerability of the application software interface for creating Cisco Unified Intelligence Center reports allows a intruder to gain unauthorized access to the device.

The vulnerability of the application programming interface for creating Cisco Unified Intelligence Center reports is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device...

The vulnerability of the Cisco Unified Intelligence Center reporting software lies in the lack of protection for operational data, which allows attackers to execute SSRF attacks and expose the protected information.

The vulnerability of the Cisco Unified Intelligence Center reporting software lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to perform SSRF attacks and disclose sensitive information through a specially crafted HTTP request...

CVE-2022-37012

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-37013

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537 with vendor rollup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of...

CVE-2022-37012

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-37013

Summary: CVE-2022-37013 affects Unified Automation OPC UA C++ Demo Server 1.7.6-537 (with vendor rollup). The root cause is in certificate handling, where a crafted certificate can force the server into an infinite loop, enabling a remote, unauthenticated denial‑of‑service. Documented by ZDI as t...

Unified Automation OPC UA C++Demo Server 安全漏洞

Unified Automation OPC UA C++Demo Server is a machine-to-machine communication protocol application for industrial automation from Unified Automation. A security vulnerability exists in Unified Automation OPC UA C++ Demo Server version 1.7.6-537, which stems from a crafted OPC UA message that can...

CVE-2022-37013

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537 with vendor rollup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of...

Unified Automation OPC UA C++ Demo Server 安全漏洞

Unified Automation OPC UA C++Demo Server is a machine-to-machine communication protocol application for industrial automation from Unified Automation. A security vulnerability exists in Unified Automation OPC UA C++ Demo Server version 1.7.6-537, which stems from a crafted certificate that can...

CVE-2022-37012

The CVE-2022-37012 entry affects Unified Automation OPC UA C++ Demo Server 1.7.6-537. The underlying flaw is in OpcUa_SecureListener_ProcessSessionCallRequest, where a crafted OPC UA message can cause an incorrect reference-count update, enabling a network-based denial-of-service without authenti...

The vulnerability of the Active IQ Unified Manager, a tool for managing the state and performance of data storage systems, stems from deficiencies in access control. This allows attackers to update subscriptions to EMS.

The vulnerability of the Active IQ Unified Manager, a tool for managing system storage performance and status, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to update subscriptions to EMS through unauthorized channels...

The vulnerability of Adobe Dimension’s 3D design software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Dimension’s 3D design software relates to the execution of operations beyond the buffer boundaries in memory when processing USD files. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

Reduce Risk and Regain Control with Cloud Risk Complete

Over the last 10 to 15 years, organizations have been migrating to the cloud to take advantage of the speed and scale it enables. During that time, we’ve all had to learn that new cloud infrastructure means new security challenges, and that many legacy tools and processes are unable to keep up wi...