Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified contact center enterprise vulnerabilities and exploits

(subscribe to this query)

6.1
CVSSv3
CVE-2016-1439
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650....
Cisco Unified Contact Center Enterprise 10.5\\(2\\)Cisco Unified Contact Center Enterprise 8.0\\(3\\)Cisco Unified Contact Center Enterprise 7.5\\(10\\)Cisco Unified Contact Center Enterprise 7.5\\(3\\)Cisco Unified Contact Center Enterprise 7.2\\(7\\)Cisco Unified Contact Center Enterprise 7.2\\(6\\)Cisco Unified Contact Center Enterprise 7.0\\(0\\)Cisco Unified Contact Center Enterprise 6.0\\(0\\)Cisco Unified Contact Center Enterprise 5.0\\(0\\)Cisco Unified Contact Center Enterprise 4.6\\(2\\)Cisco Unified Contact Center Enterprise 8.5\\(1\\)Cisco Unified Contact Center Enterprise 8.0\\(2\\)Cisco Unified Contact Center Enterprise 7.1\\(2\\)Cisco Unified Contact Center Enterprise 7.1.0Cisco Unified Contact Center Enterprise 9.0\\(3\\)Cisco Unified Contact Center Enterprise 8.5\\(4\\)Cisco Unified Contact Center Enterprise 7.5\\(7\\)Cisco Unified Contact Center Enterprise 7.5\\(6\\)Cisco Unified Contact Center Enterprise 7.2\\(3\\)Cisco Unified Contact Center Enterprise 7.2\\(2\\)Cisco Unified Contact Center Enterprise 10.5\\(1\\)Cisco Unified Contact Center Enterprise 7.1\\(4\\)Cisco Unified Contact Center Enterprise 4.6.2Cisco Unified Contact Center Enterprise 8.5\\(3\\)Cisco Unified Contact Center Enterprise 8.5\\(2\\)Cisco Unified Contact Center Enterprise 7.5\\(5\\)Cisco Unified Contact Center Enterprise 7.5\\(4\\)Cisco Unified Contact Center Enterprise 7.1\\(5\\)Cisco Unified Contact Center Enterprise 10.0\\(1\\)Cisco Unified Contact Center Enterprise 9.0\\(2\\)Cisco Unified Contact Center Enterprise 7.1\\(3\\)Cisco Unified Contact Center Enterprise 10.0\\(2\\)Cisco Unified Contact Center Enterprise 9.0\\(4\\)Cisco Unified Contact Center Enterprise 7.5\\(9\\)Cisco Unified Contact Center Enterprise 7.5\\(8\\)Cisco Unified Contact Center Enterprise 7.2\\(5\\)Cisco Unified Contact Center Enterprise 7.2\\(4\\)Cisco Unified Contact Center Enterprise 7.5\\(2\\)Cisco Unified Contact Center Enterprise 7.2\\(1\\)
NA
CVE-2007-0198
The JTapi Gateway process in Cisco Unified Contact Center Enterprise, Unified Contact Center Hosted, IP Contact Center Enterprise, and Cisco IP Contact Center Hosted 5.0 through 7.1 allows remote attackers to cause a denial of service (repeated process restart) via a certain TCP...
Cisco Ip Contact Center Hosted 5.0Cisco Unified Contact Center Enterprise 5.0Cisco Ip Contact Center Enterprise 5.0Cisco Unified Contact Center HostedCisco Unified Contact Center Hosted 5.0Cisco Ip Contact Center EnterpriseCisco Ip Contact Center HostedCisco Unified Contact Center Enterprise
4.3
CVE-2023-20062
Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to release software updates that address these...
Cisco Unified Contact Center Express -Cisco Unified Intelligence CenterCisco Packaged Contact Center Enterprise -Cisco Unified Contact Center Enterprise -
6.5
CVE-2023-20061
Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to release software updates that address these...
Cisco Unified Contact Center Express -Cisco Unified Intelligence CenterCisco Packaged Contact Center Enterprise -Cisco Unified Contact Center Enterprise -
6.1
CVE-2023-20058
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based...
Cisco Unified Contact Center ExpressCisco Unified Contact Center EnterpriseCisco Packaged Contact Center EnterpriseCisco Unified Intelligence Center
6.1
CVSSv3
CVE-2021-1395
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management...
Cisco Unified Contact Center Enterprise -Cisco Packaged Contact Center Enterprise -Cisco Unified Intelligence CenterCisco Unified Contact Center ExpressCisco Unified Intelligence Center 12.5\\(1\\)
NA
CVE-2007-5539
Unspecified vulnerability in Cisco Unified Intelligent Contact Management Enterprise (ICME), Unified ICM Hosted (ICMH), Unified Contact Center Enterprise (UCCE), Unified Contact Center Hosted (UCCH), and System Unified Contact Center Enterprise (SUCCE) 7.1(5) allows remote...
Cisco Unified Icm HostedCisco Unified Intelligent Contact Management EnterpriseCisco Unified Contact Center EnterpriseCisco Unified Contact Center Enterprise 7.1\\(5\\)Cisco Unified Contact Center Hosted
NA
CVE-2014-2180
The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133....
Cisco Unified Contact Center EnterpriseCisco Unified Contact Center Express Editor Software -
5.3
CVSSv3
CVE-2017-6626
A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allow an unauthenticated, remote attacker to retrieve information from agents using the Finesse Desktop. The vulnerability is due to the...
Cisco Unified Contact Center Enterprise 11.5\\(1\\)Cisco Unified Contact Center Enterprise 11.6\\(1\\)
5.9
CVSSv3
CVE-2020-3163
A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software improperly manages...
Cisco Unified Contact Center Enterprise
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-43628CVE-2023-23397CVE-2023-42917CVE-2023-42559physicalcode executiontemplate injectionCVE-2023-49373CVE-2023-42566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook