Lucene search

K
CiscoPackaged Contact Center Enterprise

7 matches found

CVE
CVE
added 2021/12/10 10:15 a.m.5728 views

CVE-2021-44228

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message ...

10CVSS10AI score0.94358EPSS
CVE
CVE
added 2023/01/20 7:15 a.m.92 views

CVE-2023-20058

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface d...

6.1CVSS6AI score0.00182EPSS
CVE
CVE
added 2023/03/03 4:15 p.m.70 views

CVE-2023-20061

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to release software updates that address these vulnerabilities.

6.5CVSS6.6AI score0.00124EPSS
CVE
CVE
added 2023/03/03 4:15 p.m.66 views

CVE-2023-20062

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to release software updates that address these vulnerabilities.

6.5CVSS5.3AI score0.00123EPSS
CVE
CVE
added 2021/06/16 6:15 p.m.63 views

CVE-2021-1395

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not pr...

6.1CVSS5.1AI score0.00322EPSS
CVE
CVE
added 2018/10/05 2:29 p.m.38 views

CVE-2018-0445

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based...

8.8CVSS8.7AI score0.00205EPSS
CVE
CVE
added 2018/10/05 2:29 p.m.36 views

CVE-2018-0444

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the web-bas...

6.1CVSS6.3AI score0.00106EPSS