WID-SEC-2024-1303 — Cisco Finesse: Mehrere Schwachstellen

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Finesse ausnutzen, um einen Cross Site Scripting Angriff auszuführen und vertrauliche Informationen offenzulegen.

Product

Cisco Finesse integriert traditionelle Contact-Center-Funktionen web-basiert in einen Thin-Client-Desktop.

Vulnerabilities 2

High 7.2

CVE-2024-20404 Public exploit Scanner template EPSS 23%

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker …

Cisco Cisco Unified Contact Center Express Cisco Unified Contact Center Enterprise Cisco Packaged Contact Center Enterprise Network devices

Jun 5, 2024
Medium 4.8

CVE-2024-20405 Public exploit

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker …

Cisco Cisco Unified Contact Center Express Cisco Unified Contact Center Enterprise Cisco Packaged Contact Center Enterprise Network devices

Jun 5, 2024

Revision history

2024-06-05 #1
Initiale Fassung

References

Cisco Security Advisory vom 2024-06-05
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-ssrf-rfi-Um7wT8Ew