cisco-sa-uccx-wcp-JJeqDT3S: Cisco Unified Contact Center Express Finesse Portal Web Cache Poisoning Vulnerability
A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to cause a web cache poisoning attack on an affected device. This vulnerability is due to improper input validation of HTTP
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-uccx-wcp-JJeqDT3S?
The severity of cisco-sa-uccx-wcp-JJeqDT3S is classified as critical due to the potential for web cache poisoning attacks.
How do I fix cisco-sa-uccx-wcp-JJeqDT3S?
To mitigate cisco-sa-uccx-wcp-JJeqDT3S, users should update to the latest Cisco Unified Contact Center Express release that addresses this vulnerability.
Who is affected by cisco-sa-uccx-wcp-JJeqDT3S?
Organizations using affected versions of Cisco Unified Contact Center Express are vulnerable to cisco-sa-uccx-wcp-JJeqDT3S.
What type of attack can cisco-sa-uccx-wcp-JJeqDT3S facilitate?
cisco-sa-uccx-wcp-JJeqDT3S can facilitate web cache poisoning attacks which can compromise information stored in caches.
Is authentication required to exploit cisco-sa-uccx-wcp-JJeqDT3S?
No, cisco-sa-uccx-wcp-JJeqDT3S allows unauthenticated remote attackers to exploit the vulnerability.