unified contact center express editor software vulnerabilities and exploits

(subscribe to this query)

4

CVSSv2

The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133.

Cisco Unified Contact Center Enterprise Cisco Unified Contact Center Express Editor Software -

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express (Unified CCX) allows remote malicious users to hijack the authentication of arbitrary users, aka Bug ID CSCum95502.

Cisco Unified Contact Center Express Editor Software -

4

CVSSv2

The disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536.

Cisco Unified Contact Center Express Editor Software -

4

CVSSv2

Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575.

Cisco Unified Contact Center Express Editor Software -

5

CVSSv2

The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote malicious users to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.

Cisco Unified Contact Center Express Editor Software -

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook