CVE-2019-1888

CVE-2019-1888 affects Cisco Unified Contact Center Express (Unified CCX). Vulnerability in the Administration Web Interface allows an authenticated attacker with valid Administrator credentials to upload arbitrary files containing OS commands, which will be executed on the underlying system. The ...

CVE-2011-3315

CVE-2011-3315 describes a directory-traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x/6.x up to 6.1(5)SU2, CUCM 7.x up to 7.1(5b)SU2, CUCM 8.x up to 8.0(3), and in Cisco Unified Contact Center Express (UCCX) and Cisco Unified IP IVR up to specified revisions. The flaw all...

CVE-2010-1570

Cisco UCCX CTI server DoS vulnerability (CVE-2010-1570) affects CTI server in UCCX 7.0 (before 7.0(1)SR4 and 7.0(2)), 6.0 (before 6.0(1)SR1), and 5.0 (before 5.0(2)SR3). A malformed CTI message triggers the CTI server and Node Manager to fail, logging out all active agents and causing temporary s...

CVE-2018-0403

CVE-2018-0403 affects Cisco Unified Contact Center Express (Unified CCX) through its web-based management interface. The root cause is the web UI pre-populating the login form password field with previously stored passwords from an internal database, enabling an unauthenticated, remote attacker t...

CVE-2018-0400

CVE-2018-0400 concerns Cisco Unified Contact Center Express (Unified CCX) and its web-based management interface. The connected documents confirm a cross-site scripting (XSS) vulnerability that could be exploited by an unauthenticated, remote attacker who entices a user to click a crafted link, e...

CVE-2010-1571

CVE-2010-1571 describes a directory traversal in the bootstrap service of Cisco Unified Contact Center Express (UCCX). A crafted bootstrap message to TCP port 6295 can allow an unauthenticated attacker to read arbitrary files on affected systems. Cisco’s advisory shows affected releases across UC...

CVE-2018-0402

Cisco Unified Contact Center Express (Unified CCX) web-based management interface is affected by CVE-2018-0402, a CSRF vulnerability in the interface. Exploitation, as described in the connected Cisco advisory and multiple CNVD/PRION/NVD records, could allow an unauthenticated, remote attacker to...

CVE-2018-0401

Cisco Unified Contact Center Express (Unified CCX) web-based management interface contains multiple vulnerabilities, including cross-site scripting (XSS) due to inadequate input validation, and CSRF and cleartext password exposure as described in Cisco advisory Cisco-SA-20180718-UCCX. Exploitatio...