Cisco

Unified Contact Center Express

26 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2020-3280

  • EPSS 6.35%
  • Published 22.05.2020 06:15:10
  • Last modified 21.11.2024 05:30:42

A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to insecure deseri...

7.5

CVE-2020-3177

  • EPSS 0.95%
  • Published 15.04.2020 21:15:35
  • Last modified 21.11.2024 05:30:29

A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to conduct d...

6.1

CVE-2019-15278

  • EPSS 0.7%
  • Published 26.01.2020 05:15:11
  • Last modified 21.11.2024 04:28:21

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails...

6.1

CVE-2019-15259

  • EPSS 0.21%
  • Published 02.10.2019 19:15:15
  • Last modified 21.11.2024 04:28:18

A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. The vulnerability is due to insufficient input validation of some parameters that ar...

7.5

CVE-2019-12633

  • EPSS 0.51%
  • Published 05.09.2019 02:15:12
  • Last modified 21.11.2024 04:23:13

A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to ...

4.8

CVE-2019-12626

  • EPSS 0.17%
  • Published 21.08.2019 19:15:13
  • Last modified 21.11.2024 04:23:13

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management...

9.8

CVE-2018-0403

  • EPSS 0.69%
  • Published 18.07.2018 23:29:01
  • Last modified 21.11.2024 03:38:09

Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to retrieve a cleartext password. Cisco Bug IDs: CSCvg71040.

8.8

CVE-2018-0402

  • EPSS 0.2%
  • Published 18.07.2018 23:29:01
  • Last modified 21.11.2024 03:38:09

Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. Cisco Bug IDs: CSCvg70921.

6.1

CVE-2018-0401

  • EPSS 0.3%
  • Published 18.07.2018 23:29:01
  • Last modified 21.11.2024 03:38:09

Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco ...

6.1

CVE-2018-0400

  • EPSS 0.48%
  • Published 18.07.2018 23:29:01
  • Last modified 21.11.2024 03:38:08

Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco ...