314 matches found
Multiple Cisco Finesse Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in Cisco Finesse could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks. The vulnerabilities are due to improper input validation of certain parameters passed via HTTP GET or POST methods to an affected device. An unauthenticated, remo...
Cisco Finesse Remote Denial of Service Vulnerability
Cisco Finesse is a set of call center management software from Cisco USA. The software improves the customer experience and increases customer service representative satisfaction. A remote denial of service vulnerability exists in Cisco Finesse, which arises from the program's failure to properly...
CVE-2015-0754
Cisco Finesse 10.51 allows remote authenticated users to obtain sensitive information or cause a denial of service CPU and memory consumption via a crafted XML document, aka Bug ID CSCut95810...
CVE-2015-0754
Cisco Finesse 10.51 allows remote authenticated users to obtain sensitive information or cause a denial of service CPU and memory consumption via a crafted XML document, aka Bug ID CSCut95810...
CVE-2015-0754
Cisco Finesse 10.5(1) is affected by a vulnerability (CVE‑2015‑0754) due to improper processing of XML files. An authenticated remote attacker can cause a DoS (high CPU/memory usage) or obtain sensitive information by sending a crafted XML document. The vulnerability requires authentication and, ...
CVE-2015-0754: Improper Input Validation
Cisco Finesse 10.51 allows remote authenticated users to obtain sensitive information or cause a denial of service CPU and memory consumption via a crafted XML document, aka Bug ID CSCut95810...
PT-2015-4863
Name of the Vulnerable Software and Affected Versions Cisco Finesse version 10.51 Description The issue allows remote authenticated users to obtain sensitive information or cause a denial of service, resulting in CPU and memory consumption, via a crafted XML document. Recommendations For Cisco...
Cisco Finesse XML Processing Denial of Service Vulnerability
A vulnerability in Cisco Finesse could allow an authenticated, remote attacker to gain access to sensitive information or cause a denial of service DoS condition. The vulnerability is due to improper processing of XML files by an affected device. An authenticated, remote attacker could exploit th...
Multiple Cross-Site Scripting Vulnerabilities in Cisco Finesse Server
Cisco Finesse Server is an agent and management desktop developed by Cisco. Cisco Finesse Server has multiple cross-site scripting vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse Server 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595...
CVE-2015-0714
Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse Server 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595...
CVE-2015-0714
Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse Server 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595...
CVE-2015-0714
CVE-2015-0714 affects Cisco Finesse Server versions 10.0(1), 10.5(1), 10.6(1), and 11.0(1). The vulnerability is a cross-site scripting (XSS) flaw caused by improper validation of user-supplied input, allowing remote attackers to inject arbitrary script or HTML via unspecified parameters. Impacte...
PT-2015-4834
Name of the Vulnerable Software and Affected Versions Cisco Finesse Server versions 10.01 through 11.01 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Recommendations For versions 10.01 through 11.01, update to a version that fixes...
CVE-2015-0714: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse Server 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595...
Cisco Finesse Server Cross-Site Scripting Vulnerability
A vulnerability in Cisco Finesse Server could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks. The vulnerability is due to improper input validation of certain parameters passed via HTTP GET or POST methods to an affected device. An unauthenticated, remote...
Cisco Finesse Directory Read Vulnerability
A vulnerability in the web interface of Cisco Finesse could allow an unauthenticated, remote attacker to read the contents of a directory on the server. The vulnerability is due to insufficient access controls on directory access. An attacker could exploit this vulnerability by visiting a URL tha...
Cisco Finesse User Data in Query Vulnerability
A vulnerability in HTTP queries of Cisco Finesse could allow an unauthenticated, remote attacker to collect potentially sensitive user data. The vulnerability is due to insecure transmission of user data in an HTTP query. An attacker could exploit this vulnerability by capturing the HTTP query...