Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express Unified CCX allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502...

CVE-2014-2102

Cisco Unified Contact Center Express (Unified CCX) CCMConfig page contains sensitive information that can be accessed by an authenticated, remote attacker. The issue arises from improper content restriction on CCMConfig, enabling information disclosure. Cisco advisories state no software updates ...

CVE-2014-0745

Cisco CCX Unified Serviceability CSRF (CVE-2014-0745) is due to insufficient CSRF protections in the Unified Serviceability component. An unauthenticated or authenticated user could be compelled to perform actions in the Cisco Unified Serviceability pages with the user’s privileges by visiting a ...

Design/Logic Flaw

The scripts editor in Cisco Unified Contact Center Express aka Unified CCX does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546...

CVE-2013-1214

CVE-2013-1214 affects the Cisco Unified Contact Center Express (Unified CCX) scripts editor. The issue is improper privilege management for anonymous logins, allowing remote attackers to read arbitrary scripts by browsing the scripts repository directory. This is an unauthenticated access concern...

CVE-2011-2583

Cisco Unified Contact Center Express aka CCX 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834...

CVE-2011-2583

Cisco Unified Contact Center Express (CCX) versions 8.0 and 8.5 are affected by CVE-2011-2583, which allows remote attackers to cause a denial of service via crafted network traffic (Bug CSCth33834). The connected sources confirm the affected product family and the DoS impact but do not provide d...

Directory traversal

Directory traversal vulnerability in Cisco Unified Communications Manager CUCM 5.x and 6.x before 6.15SU2, 7.x before 7.15bSU2, and 8.x before 8.03, and Cisco Unified Contact Center Express aka Unified CCX or UCCX and Cisco Unified IP Interactive Voice Response Unified IP-IVR before 6.01SR1ES8,...

CVE-2011-3315

Directory traversal vulnerability in Cisco Unified Communications Manager CUCM 5.x and 6.x before 6.15SU2, 7.x before 7.15bSU2, and 8.x before 8.03, and Cisco Unified Contact Center Express aka Unified CCX or UCCX and Cisco Unified IP Interactive Voice Response Unified IP-IVR before 6.01SR1ES8,...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified...

CVE-2009-2048

Cross-site scripting XSS vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified...

CVE-2009-2048

CVE-2009-2048 affects Cisco Unified CCX/CRS Admin pages. The stored cross-site scripting vulnerability allows authenticated users to inject JavaScript into the CCX database via the Administration interface, enabling script execution in the browser of the next authenticated user. Impact details in...

CVE-2009-2048

Cross-site scripting XSS vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified...

CVE-2009-2047

Cisco CVE-2009-2047 pertains to a directory traversal vulnerability in the Administration interface of Cisco Customer Response Solutions (CRS) and Cisco Unified CCX, affecting CRS before 7.0(1) SR2. The flaw allows remote authenticated users to read, modify, or delete arbitrary files on the serve...