14 matches found
EUVD-2018-7386
Malware in sbrugna...
CVE-2022-37462
A stored Cross-Site Scripting XSS vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentId in the file-upload details...
CVE-2022-37462: Improper Neutralization of Input During Web Page Generation
A stored Cross-Site Scripting XSS vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentId in the file-upload details...
CVE-2022-37462
CVE-2022-37462 describes a stored XSS in the Chat gadget of Upstream Works Agent Desktop for Cisco Finesse via the AttachmentId in file-upload details. Affected: Upstream Works Agent Desktop for Cisco Finesse versions 4.2.12 and earlier, and 5.0. Root cause: insecure handling of AttachmentId in f...
CVE-2018-15508
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhoneissue 1 of 2...
Five9 Agent Desktop Plus Access Control Error Vulnerability
Five9 Agent Desktop Plus is a suite of cloud-based contact center software from Five9 USA. An access control error vulnerability exists in Five9 Agent Desktop Plus version 10.0.70. A remote attacker could exploit the vulnerability to execute code...
CVE-2018-15509
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control issue 2 of 2...
Improper access control
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control issue 2 of 2...
CVE-2018-15508
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhoneissue 1 of 2...
CVE-2018-15509
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control issue 2 of 2...
CVE-2018-15509
Five9 Agent Desktop Plus 10.0.70 is affected by an Incorrect Access Control vulnerability (CVE-2018-15509). Multiple connected records (CNVD-2019-07887) describe an access control error in Five9 Agent Desktop Plus, with CNVD noting a remote attacker could execute code. NVD data corroborates the C...
CVE-2018-15508
Summary: CVE-2018-15508 affects Five9 Agent Desktop Plus 10.0.70, where an incorrect access control allows a remote attacker to cause a denial of service by opening a connection on port 8083 to a device running the Five9 SoftPhone. The NVD entry documents the issue with a network-based vector and...
CVE-2018-15508: Incorrect Permission Assignment for Critical Resource
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhoneissue 1 of 2...