Lucene search

K
CiscoFinesse

5 matches found

CVE
CVE
added 2019/09/05 2:15 a.m.134 views

CVE-2019-12632

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker ...

7.5CVSS6.1AI score0.00565EPSS
CVE
CVE
added 2023/03/03 4:15 p.m.58 views

CVE-2023-20088

A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for new and existing users who are connected through a load balancer. This vulnerabilit...

7.5CVSS6.4AI score0.00333EPSS
CVE
CVE
added 2018/06/07 12:29 p.m.55 views

CVE-2017-6779

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occu...

7.8CVSS7.5AI score0.01275EPSS
CVE
CVE
added 2024/06/05 5:15 p.m.53 views

CVE-2024-20404

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent to an affected...

7.2CVSS6.4AI score0.39642EPSS
CVE
CVE
added 2015/05/29 3:59 p.m.40 views

CVE-2015-0754

Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.

7.5CVSS6.4AI score0.00349EPSS