Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified contact center enterprise - vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2016-1439
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise up to and including 10.5(2) allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650.
Cisco Unified Contact Center Enterprise 10.5\\(2\\)Cisco Unified Contact Center Enterprise 8.0\\(3\\)Cisco Unified Contact Center Enterprise 7.5\\(10\\)Cisco Unified Contact Center Enterprise 7.5\\(3\\)Cisco Unified Contact Center Enterprise 7.2\\(7\\)Cisco Unified Contact Center Enterprise 7.2\\(6\\)Cisco Unified Contact Center Enterprise 7.0\\(0\\)Cisco Unified Contact Center Enterprise 6.0\\(0\\)Cisco Unified Contact Center Enterprise 5.0\\(0\\)Cisco Unified Contact Center Enterprise 4.6\\(2\\)Cisco Unified Contact Center Enterprise 8.5\\(1\\)Cisco Unified Contact Center Enterprise 8.0\\(2\\)Cisco Unified Contact Center Enterprise 7.1\\(2\\)Cisco Unified Contact Center Enterprise 7.1.0Cisco Unified Contact Center Enterprise 9.0\\(3\\)Cisco Unified Contact Center Enterprise 8.5\\(4\\)Cisco Unified Contact Center Enterprise 7.5\\(7\\)Cisco Unified Contact Center Enterprise 7.5\\(6\\)Cisco Unified Contact Center Enterprise 7.2\\(3\\)Cisco Unified Contact Center Enterprise 7.2\\(2\\)Cisco Unified Contact Center Enterprise 10.5\\(1\\)Cisco Unified Contact Center Enterprise 7.1\\(4\\)
5
CVSSv2
CVE-2007-0198
The JTapi Gateway process in Cisco Unified Contact Center Enterprise, Unified Contact Center Hosted, IP Contact Center Enterprise, and Cisco IP Contact Center Hosted 5.0 up to and including 7.1 allows remote malicious users to cause a denial of service (repeated process restart) ...
Cisco Ip Contact Center Hosted 5.0Cisco Unified Contact Center Enterprise 5.0Cisco Ip Contact Center Enterprise 5.0Cisco Unified Contact Center HostedCisco Unified Contact Center Hosted 5.0Cisco Ip Contact Center EnterpriseCisco Ip Contact Center HostedCisco Unified Contact Center Enterprise
9
CVSSv2
CVE-2007-5539
Unspecified vulnerability in Cisco Unified Intelligent Contact Management Enterprise (ICME), Unified ICM Hosted (ICMH), Unified Contact Center Enterprise (UCCE), Unified Contact Center Hosted (UCCH), and System Unified Contact Center Enterprise (SUCCE) 7.1(5) allows remote authen...
Cisco Unified Icm HostedCisco Unified Intelligent Contact Management EnterpriseCisco Unified Contact Center EnterpriseCisco Unified Contact Center Enterprise 7.1\\(5\\)Cisco Unified Contact Center Hosted
4
CVSSv2
CVE-2014-3323
Directory traversal vulnerability in Cisco Unified Contact Center Enterprise allows remote authenticated users to read arbitrary web-root files via a crafted URL, aka Bug ID CSCun25262.
Cisco Unified Contact Center Enterprise
4
CVSSv2
CVE-2014-2180
The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133.
Cisco Unified Contact Center EnterpriseCisco Unified Contact Center Express Editor Software -
5
CVSSv2
CVE-2017-6626
A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allow an unauthenticated, remote malicious user to retrieve information from agents using the Finesse Desktop. The vulnerability is due to the ex...
Cisco Unified Contact Center Enterprise 11.5\\(1\\)Cisco Unified Contact Center Enterprise 11.6\\(1\\)
4.3
CVSSv2
CVE-2021-1395
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based managem...
Cisco Unified Contact Center Enterprise -Cisco Packaged Contact Center Enterprise -Cisco Unified Intelligence CenterCisco Unified Contact Center ExpressCisco Unified Intelligence Center 12.5\\(1\\)
NA
CVE-2023-20061
Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote malicious user to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to release software updates that address th...
Cisco Unified Contact Center Express -Cisco Unified Intelligence CenterCisco Packaged Contact Center Enterprise -Cisco Unified Contact Center Enterprise -
NA
CVE-2023-20062
Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote malicious user to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to release software updates that address th...
Cisco Unified Contact Center Express -Cisco Unified Intelligence CenterCisco Packaged Contact Center Enterprise -Cisco Unified Contact Center Enterprise -
NA
CVE-2023-20058
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote malicious user to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-bas...
Cisco Unified Contact Center ExpressCisco Unified Contact Center EnterpriseCisco Packaged Contact Center EnterpriseCisco Unified Intelligence Center
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook