cisco finesse vulnerabilities and exploits

(subscribe to this query)

8.6

CVSSv3

The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 through 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 10.5(1)SU1.7, 10.6(1),...

Cisco Finesse 9.1\\(1\\) Es2 Cisco Finesse 9.1\\(1\\) Es3 Cisco Finesse 8.5\\(2\\) Base Cisco Finesse 8.5\\(3\\) Base Cisco Finesse 10.6\\(1\\) Su1 Cisco Finesse 10.6\\(1\\) Base Cisco Finesse 10.5\\(1\\) Su1.7 Cisco Finesse 10.5\\(1\\) Base Cisco Finesse 10.0\\(1\\) Base Cisco Finesse 9.1\\(1\\) Es1 Cisco Finesse 9.0\\(1\\) Base Cisco Finesse 8.5\\(1\\) Base Cisco Finesse 11.0\\(1\\) Base Cisco Finesse 10.6\\(1\\) Su2 Cisco Finesse 10.5\\(1\\) Su1 Cisco Finesse 10.5\\(1\\) Su1.1 Cisco Finesse 9.1\\(1\\) Es4 Cisco Finesse 9.1\\(1\\) Es5 Cisco Finesse 9.1\\(1\\) Su1.1 Cisco Finesse 8.5\\(4\\) Base Cisco Finesse 8.5\\(5\\) Base Cisco Finesse 10.5\\(1\\) Es1 Cisco Finesse 10.5\\(1\\) Es2 Cisco Finesse 10.0\\(1\\) Su1.1 Cisco Finesse 10.0\\(1\\) Su1 Cisco Finesse 9.1\\(1\\) Su1 Cisco Finesse 9.1\\(1\\) Base Cisco Finesse 8.6\\(1\\) Base Cisco Finesse 9.0\\(2\\) Base Cisco Finesse 10.5\\(1\\) Es3 Cisco Finesse 10.5\\(1\\) Es4

6.1

CVSSv3

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack and obtain potentially confidential information by leveraging a flaw in the authentication mechanism....

Cisco Finesse 12.0\\(1\\)Cisco Finesse 12.5\\(1\\)Cisco Finesse

6.1

CVSSv3

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack and obtain potentially confidential information by leveraging a flaw in the authentication mechanism....

Cisco Finesse 12.0\\(1\\)Cisco Finesse 12.5\\(1\\)Cisco Finesse

NA

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595....

Cisco Finesse 10.0\\(1\\) Base Cisco Finesse 10.5\\(1\\) Base Cisco Finesse 10.6\\(1\\) Base Cisco Finesse 11.0\\(1\\) Base

7.5

A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for new and existing users who are connected through a load...

Cisco Finesse Cisco Finesse 12.6\\(1\\)

7.5

CVSSv3

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied...

Cisco Finesse 11.6\\(1\\)Cisco Finesse 12.5\\(1\\)Cisco Finesse 12.0\\(1\\)

6.1

CVSSv3

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to...

Cisco Finesse

6.1

CVSSv3

A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability...

Cisco Finesse 11.5\\(1\\)Cisco Finesse 10.6\\(1\\)

6.1

CVSSv3

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it...

Cisco Finesse 11.6\\(1\\)Cisco Finesse 12.0\\(1\\)Cisco Finesse 12.5\\(1\\)Cisco Unified Contact Center Express 12.0\\(1\\)

6.1

CVSSv3

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to insufficient validation...

Cisco Finesse 11.5\\(1\\)

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook