CVE-2014-2102

Cisco Unified Contact Center Express (Unified CCX) CCMConfig page contains sensitive information that can be accessed by an authenticated, remote attacker. The issue arises from improper content restriction on CCMConfig, enabling information disclosure. Cisco advisories state no software updates ...

CVE-2013-1214

CVE-2013-1214 affects the Cisco Unified Contact Center Express (Unified CCX) scripts editor. The issue is improper privilege management for anonymous logins, allowing remote attackers to read arbitrary scripts by browsing the scripts repository directory. This is an unauthenticated access concern...

CVE-2014-0745

Cisco CCX Unified Serviceability CSRF (CVE-2014-0745) is due to insufficient CSRF protections in the Unified Serviceability component. An unauthenticated or authenticated user could be compelled to perform actions in the Cisco Unified Serviceability pages with the user’s privileges by visiting a ...

CVE-2014-0746

CVE-2014-0746 affects Cisco Unified Contact Center Express (Unified CCX) Disaster Recovery System (DRS). The issue is an information disclosure: extraneous fields on a DRS web page allow an authenticated, remote attacker to obtain sensitive device information. Root cause is inclusion of sensitive...

CVE-2014-2180

The Cisco advisory for CVE-2014-2180 describes a vulnerability in the Document Management component of Cisco Unified Contact Center Express where insufficient parameter validation allows an authenticated, remote attacker to upload files to arbitrary filesystem locations via a crafted HTTP request...