Latest cisco unified contact center express Vulnerabilities

● CVE-2024-20253
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vul...
Cisco Unified Communications Manager<12.5\(1\)su8
Cisco Unified Communications Manager>=14.0<14su3
Cisco Unified Communications Manager<12.5\(1\)su8
Cisco Unified Communications Manager>=14.0<14su3
Cisco Unified Communications Manager IM and Presence Service<12.5\(1\)su8
Cisco Unified Communications Manager IM and Presence Service>=14.0<14.0su3
and 6 more
● CVE-2023-20232
A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to cause a web cache poisoning attack on an affected...
Cisco Unified Contact Center Express<12.5\(1\)_su2_es05
● CVE-2023-20096
A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS)...
Cisco Unified Contact Center Express<12.5\(1\)su3
● CVE-2023-20062
Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on a...
Cisco Packaged Contact Center Enterprise
Cisco Unified Contact Center Enterprise
Cisco Unified Contact Center Express
Cisco Unified Intelligence Center<12.6\(2\)
● CVE-2023-20061
Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on a...
Cisco Packaged Contact Center Enterprise
Cisco Unified Contact Center Enterprise
Cisco Unified Contact Center Express
Cisco Unified Intelligence Center<12.6\(2\)
● CVE-2023-20058
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack agai...
Cisco Packaged Contact Center Enterprise>=9.0\(1\)<12.5\(1\)_su2_es05
Cisco Packaged Contact Center Enterprise>=12.5\(1\)_su2<12.5\(1\)_su2_es05
Cisco Unified Contact Center Enterprise<12.5\(1\)_es02
Cisco Unified Contact Center Enterprise>=12.5\(2\)<12.6\(1\)_es06
Cisco Unified Contact Center Enterprise>=12.6\(1\)<12.6\(1\)_es06
Cisco Unified Contact Center Express<12.5\(1\)_su2_es05
and 4 more
● CVE-2022-20658
A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) and Cisco Unified Contact Center Domain Manager (Unified CCDM) could allow an aut...
Cisco Unified Contact Center Express=12.0.1
Cisco Unified Contact Center Express=12.5.1
Cisco Unified Contact Center Management Portal<=11.6.1
● CVE-2021-44228
Apache Log4j2 Remote Code Execution Vulnerability
debian/apache-log4j1.2
debian/apache-log4j2
debian/apache-log4j2<=2.13.3-1<=2.7-2<=2.11.1-2
Apple Xcode<13.3
Apache Log4j2
redhat/log4j<2.15.0
and 429 more
● CVE-2021-1395
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user...
Cisco Packaged Contact Center Enterprise
Cisco Unified Contact Center Enterprise
Cisco Unified Contact Center Express<=12.5\(1\)
Cisco Unified Intelligence Center<=12.0\(1\)
Cisco Unified Intelligence Center=12.5\(1\)
● cisco-sa-cuic-xss-csHUdtrL
Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability
Cisco Unified Intelligence Center=12.5(1)<12.5(1) ES7>=11.6(1) and earlier<=12.0(1)<12.0(1) ES14
Cisco Unified Contact Center Express>=11.6(1) and earlier=12.0(1)<=12.5(1)<12.5(1) SU2
● CVE-2021-1463
Cisco Unified Contact Center Express<=12.0\(1\)
Cisco Unified Contact Center Express>=12.5\(1\)<12.5\(1\)su1
Cisco Unified Intelligence Center<=11.6\(1\)
Cisco Unified Intelligence Center>=12.0\(1\)<12.0\(1\)es14
Cisco Unified Intelligence Center>=12.5\(1\)<12.5\(1\)es7
● CVE-2020-3267
A vulnerability in the API subsystem of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to change the availability state of any agent. The vulnerabilit...
Cisco Unified Contact Center Express<12.5\(1\)
● CVE-2020-3280
A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to execute arbitrary code on an affected d...
Cisco Unified Contact Center Express>=12.0<12.0\(1\)es03
● CVE-2020-3177
A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and Cisco Unified Communications Manager Session Management Edition (SME) could allo...
Cisco Unified Communications Manager=10.5\(2.10000.5\)
Cisco Unified Communications Manager=11.5\(1.10000.6\)
Cisco Unified Communications Manager=12.0\(1.10000.10\)
Cisco Unified Communications Manager=12.5\(1.10000.22\)
Cisco Unified Contact Center Express=12.0\(1\)
● CVE-2019-15278
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. T...
Cisco Finesse=11.6\(1\)
Cisco Finesse=12.0\(1\)
Cisco Finesse=12.5\(1\)
Cisco Unified Contact Center Express=12.0\(1\)
● CVE-2019-15259
A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. The vulnerability is due to insuff...
Cisco Unified Contact Center Express<11.6\(2\)
Cisco Unified Contact Center Express=12.0\(1\)
● CVE-2019-12633
A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack ...
Cisco Unified Contact Center Express<11.6\(2\)es04
Cisco Unified Contact Center Express=12.0\(1\)
● CVE-2019-12626
A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS)...
Cisco Unified Contact Center Express=12.5\(1\)
● CVE-2018-0402
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a cross-site request for...
Cisco Unified Contact Center Express=11.5\(1\)
Cisco Unified IP Interactive Voice Response=11.5\(1\)
● CVE-2018-0400
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XS...
Cisco Unified Contact Center Express=11.5\(1\)
Cisco Unified IP Interactive Voice Response=11.5\(1\)
● CVE-2018-0403
Cisco Unified Contact Center Express=11.5\(1\)
Cisco Unified IP Interactive Voice Response=11.5\(1\)
● CVE-2017-6779
Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to ca...
Cisco Emergency Responder>=10.5<10.5\(1a\)
Cisco Emergency Responder>=11.0<11.5\(4\)
Cisco Emergency Responder>=12.0<12.0su1
Cisco Emergency Responder=11.0\(1.10000.10\)
Cisco Finesse>=11.5<11.5\(3\)
Cisco Finesse=9.5\(1\)
and 26 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203