Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco finesse vulnerabilities and exploits

(subscribe to this query)

8.6
CVSSv3
CVE-2016-1373
The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 through 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 10.5(1)SU1.7, 10.6(1),...
Cisco Finesse 9.1\\(1\\) Es2Cisco Finesse 9.1\\(1\\) Es3Cisco Finesse 8.5\\(2\\) BaseCisco Finesse 8.5\\(3\\) BaseCisco Finesse 10.6\\(1\\) Su1Cisco Finesse 10.6\\(1\\) BaseCisco Finesse 10.5\\(1\\) Su1.7Cisco Finesse 10.5\\(1\\) BaseCisco Finesse 10.0\\(1\\) BaseCisco Finesse 9.1\\(1\\) Es1Cisco Finesse 9.0\\(1\\) BaseCisco Finesse 8.5\\(1\\) BaseCisco Finesse 11.0\\(1\\) BaseCisco Finesse 10.6\\(1\\) Su2Cisco Finesse 10.5\\(1\\) Su1Cisco Finesse 10.5\\(1\\) Su1.1Cisco Finesse 9.1\\(1\\) Es4Cisco Finesse 9.1\\(1\\) Es5Cisco Finesse 9.1\\(1\\) Su1.1Cisco Finesse 8.5\\(4\\) BaseCisco Finesse 8.5\\(5\\) BaseCisco Finesse 10.5\\(1\\) Es1Cisco Finesse 10.5\\(1\\) Es2Cisco Finesse 10.0\\(1\\) Su1.1Cisco Finesse 10.0\\(1\\) Su1Cisco Finesse 9.1\\(1\\) Su1Cisco Finesse 9.1\\(1\\) BaseCisco Finesse 8.6\\(1\\) BaseCisco Finesse 9.0\\(2\\) BaseCisco Finesse 10.5\\(1\\) Es3Cisco Finesse 10.5\\(1\\) Es4
6.1
CVSSv3
CVE-2021-1246
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack and obtain potentially confidential information by leveraging a flaw in the authentication mechanism....
Cisco FinesseCisco Finesse 12.0\\(1\\)Cisco Finesse 12.5\\(1\\)
NA
CVE-2015-0714
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595....
Cisco Finesse 10.0\\(1\\) BaseCisco Finesse 10.5\\(1\\) BaseCisco Finesse 10.6\\(1\\) BaseCisco Finesse 11.0\\(1\\) Base
6.1
CVSSv3
CVE-2021-1245
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack and obtain potentially confidential information by leveraging a flaw in the authentication mechanism....
Cisco FinesseCisco Finesse 12.0\\(1\\)Cisco Finesse 12.5\\(1\\)
7.5
CVE-2023-20088
A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for new and existing users who are connected through a load...
Cisco FinesseCisco Finesse 12.6\\(1\\)
7.5
CVSSv3
CVE-2019-12632
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied...
Cisco Finesse 11.6\\(1\\)Cisco Finesse 12.5\\(1\\)Cisco Finesse 12.0\\(1\\)
6.1
CVSSv3
CVE-2017-6761
A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability...
Cisco Finesse 11.5\\(1\\)Cisco Finesse 10.6\\(1\\)
6.1
CVSSv3
CVE-2020-3159
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to...
Cisco Finesse
6.1
CVSSv3
CVE-2019-15278
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it...
Cisco Finesse 11.6\\(1\\)Cisco Finesse 12.0\\(1\\)Cisco Finesse 12.5\\(1\\)Cisco Unified Contact Center Express 12.0\\(1\\)
6.1
CVSSv3
CVE-2017-12288
A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to insufficient validation...
Cisco Finesse 11.5\\(1\\)
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21012CVE-2023-21075CVE-2021-3923CVE-2023-25664CVE-2023-21034dosCVE-2022-46169unprivilegedreflected XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook