Lucene search

K
CiscoFinesse12.0(1)

4 matches found

CVE
CVE
added 2019/09/05 2:15 a.m.134 views

CVE-2019-12632

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker ...

7.5CVSS6.1AI score0.00565EPSS
CVE
CVE
added 2020/01/26 5:15 a.m.114 views

CVE-2019-15278

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it handles requests. An ...

6.1CVSS6.3AI score0.00704EPSS
CVE
CVE
added 2021/01/13 10:15 p.m.43 views

CVE-2021-1245

Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in the web-based management interface of Cisco Finesse and Cisco Unified CVP could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user ...

6.5CVSS5.9AI score0.00107EPSS
CVE
CVE
added 2021/01/13 10:15 p.m.40 views

CVE-2021-1246

Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerability in the web management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP could allow an unauthenticated, remote attacke...

6.5CVSS6.5AI score0.00094EPSS