CVE-2019-15278

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it handles requests. A...

CVE-2019-15278

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it handles requests. A...

Authorization

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it handles requests. A...

CVE-2019-15278

Cisco Finesse is affected by a cross-site scripting issue in the web-based management interface. The root cause is that URLs are not sanitized, enabling an unauthenticated, remote attacker to craft a URL and potentially bypass authorization to access sensitive device information. The CVE entry no...

CVE-2019-15278 Cisco Finesse Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it handles requests. A...

CVE-2019-15278 Cisco Finesse Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it handles requests. A...

Cisco Finesse Cross-Site Scripting Vulnerability (CNVD-2020-03722)

Cisco Finesse is a next-generation agent and supervisor desktop designed to enhance the customer service experience in contact centers. A cross-site scripting vulnerability exists in the Web management interface in Cisco Finesse that stems from the software's failure to clean up incoming requests...

Cisco Finesse Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it handles requests. A...

Cisco Finesse CVE-2019-15278 Cross Site Scripting Vulnerability

Description Cisco Finesse is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...

Cisco Finesse Appliance HTTP Request Processing Server-Side Request Forgery Vulnerability (cisco-sa-20160504-finesse)

According to its self-reported version, the Cisco Finesse appliance is affected by a server-side request forgery SSRF in application programming interface API for gadgets integration due to insufficient access controls. An unauthenticated, remote attacker can exploit this, via crafted HTTP reques...

Cisco Finesse Appliance XML Processing Denial of Service Vulnerability (Cisco-SA-20150527-CVE-2015-0754)

According to its self-reported version, the Cisco Finesse appliance is affected by a denial of service DoS vulnerability exists due to improper processing of XML files. An authenticated, remote attacker can exploit this issue, via sending a malicious XML file, to cause the device to stop...

Cisco Finesse Appliance Directory Read Information Disclosure Vulnerability (Cisco-SA-20130812-CVE-2013-3457)

According to its self-reported version, the Cisco Finesse appliance is affected by an information disclosure vulnerability due to insufficient access controls. An unauthenticated, remote attacker can exploit this, via a URL point to the open directory, to disclose potentially sensitive informatio...

Cisco Finesse Appliance Cross-Site Scripting Vulnerability (Cisco-SA-20150501-CVE-2015-0714)

According to its self-reported version, the Cisco Finesse appliance is affected by a cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

Cisco Finesse Appliance User Data Information Disclosure Vulnerability (Cisco-SA-20130812-CVE-2013-3455)

According to its self-reported version, the Cisco Finesse appliance is affected by an information disclosure vulnerability in HTTP queries due to insufficient encryption. An unauthenticated, remote attacker can exploit this, via capturing the HTTP query, to disclose potentially sensitive...

Cisco Finesse Information Disclosure (cisco-sa-20170503-finesse-ucce)

According to its self-reported version, the Cisco Finesse Software is affected by an information disclosure vulnerability. This could allow an unauthenticated, remote attacker to retrieve information from agents using the Finesse Desktop. The vulnerability is due to the existence of a user accoun...

Cisco Finesse Information Disclosure (cisco-sa-20180718-finesse)

According to its self-reported version, Cisco Finesse Software is affected by an information disclosure vulnerability. The vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected system. Please see the...

Cisco Finesse Reflected Cross-Site Scripting Vulnerability (cisco-sa-20170802-cf)

According to its self-reported version, the Cisco Finesse Software is affected by a cross-site scripting vulnerability. This could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

Cisco Finesse Appliance Authentication Bypass Vulnerability (cisco-sa-20160202-fducce)

According to its self-reported version, the Cisco Finesse appliance is affected by an authentication bypass vulnerability exists in Extensible Messaging and Presence Protocol XMPP due to a default account with a static password. An unauthenticated, remote attacker can exploit this, via using the...

Cisco Finesse Unauthorized Access (cisco-sa-20171115-vos)

According to its self-reported version, the Cisco Finesse Software is affected by an unauthorized access vulnerability. The vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote...

Cisco Finesse Disk Utilization Denial of Service Vulnerability (cisco-sa-20180606-diskdos)

According to its self-reported version, the Cisco Finesse Software is affected by a denial of service vulnerability. The vulnerability occurs because a certain system log file does not have a maximum size restriction. This could allow an unauthenticated, remote attacker to cause high disk...