CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2023-20058

Cisco Unified Intelligence Center is affected by a reflected XSS in its web-based management interface. The issue arises from inadequate input validation, allowing an unauthenticated, remote attacker to lure a user into clicking a crafted link, which could execute arbitrary script code in the int...

CVE-2023-20061

Cisco Unified Intelligence Center (CUIC) is affected by CVE-2023-20061 (and related CVE-2023-20062 per Cisco advisory) where an authenticated, remote attacker could either access sensitive information or perform a server-side request forgery (SSRF) due to deficiencies in REST API output handling ...

CVE-2023-20062

CVE-2023-20062 concerns Cisco Unified Intelligence Center. The described issues allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) against an affected system. The root cause is described in connected advisories as improper inpu...

CVE-2021-1395

CVE-2021-1395 concerns the web-based management interface of Cisco Unified Intelligence Center, where a reflected XSS vulnerability exists due to improper input validation. An unauthenticated, remote attacker could lure a user to click a crafted link, potentially executing arbitrary script in the...

CVE-2020-3163

The CVE-2020-3163 issue affects Cisco Unified Contact Center Enterprise (Live Data server). An unauthenticated, remote attacker can trigger resource exhaustion by sending crafted Live Data packets before a legitimate client connects, leading to a stack overflow and a reload that causes DoS. The r...

CVE-2016-1439

CVE-2016-1439 is a cross-site scripting (XSS) vulnerability in the HTTP web-based management interface of Cisco Unified Contact Center Enterprise (UCCE) up to version 10.5(2). The root cause is insufficient input validation, allowing remote attackers to inject web script/HTML via a crafted URL (B...

CVE-2017-6626

CVE-2017-6626 affects Cisco Finesse Notification Service in Cisco UCCE 11.5(1) and 11.6(1). Root cause: a user account with an undocumented hard-coded password allows unauthenticated, remote attackers to subscribe to the Finesse Notification Service and receive agent-related notifications (sign-i...

CVE-2007-5539

Cisco UC/ICM suite components (ICME, ICMH, UCCE, UCCH, SUCCE) version 7.1(5) contain an unspecified vulnerability that allows remote authenticated users to gain privileges, read reports, or alter SUCCE configuration via certain web interfaces. The exact root cause, affected subcomponents, and exp...

CVE-2025-20242

The CVE-2025-20242 entry concerns Cisco Unified Contact Center Enterprise (CCE) Cloud Connect. The vulnerability arises from insufficient authentication controls in the Cloud Connect component, enabling an unauthenticated, network-based attacker to read and modify data on an affected device by se...

CVE-2007-0198

CVE-2007-0198 affects Cisco Unified Contact Center Enterprise/Hosted and Cisco IP Contact Center Enterprise/Hosted (versions 5.0–7.1). The JTapi Gateway process can be disrupted by unauthenticated remote connections to the JTapi server TCP port, causing a DoS via repeated restart of the JTapi Gat...

CVE-2014-2180

The Cisco advisory for CVE-2014-2180 describes a vulnerability in the Document Management component of Cisco Unified Contact Center Express where insufficient parameter validation allows an authenticated, remote attacker to upload files to arbitrary filesystem locations via a crafted HTTP request...

CVE-2014-3323

CVE-2014-3323 concerns Cisco Unified Contact Center Enterprise. The vulnerability is a directory traversal flaw in the product’s web-facing component that allows remote authenticated users to read arbitrary files from the web root via a crafted URL (aka Bug ID CSCun25262). Impact, as stated, is p...