6.8
CVSSv2

CVE-2014-0745

Published: 27/02/2014 Updated: 01/08/2015
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express (Unified CCX) allows remote malicious users to hijack the authentication of arbitrary users, aka Bug ID CSCum95502.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco unified contact center express editor software -

Vendor Advisories

A vulnerability in the Cisco Unified Serviceability component of Cisco Unified Contact Center Express (Cisco Unified CCX) could allow an unauthenticated, remote attacker to perform a cross-site request forgery (CSRF) attack The vulnerability is due to insufficient CSRF protections An attacker could exploit this vulnerability by convincing an aut ...