Skip to content
OpenAdvisories
Medium WID-SEC-2024-3351 1 CVE

Cisco Unified Contact Center Enterprise: Schwachstelle ermöglicht Cross-Site Scripting

Published Nov 6, 2024 · Updated Nov 6, 2024 · de-DE

Vendor: Cisco Product: Unified Contact Center Enterprise

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Unified Contact Center Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Cisco Unified Contact Center Enterprise kombiniert Mehrkanal-Rufverteilung (ACD) mit IP-Telefonie in einer einheitlichen Lösung.

Vulnerabilities 1

  • Medium 5.4
    CVE-2024-20540

    Cisco Unified Contact Center Management Portal Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting (XSS) attack against a user of th…

    Cisco Cisco Unified Contact Center Management Portal Network devices

Revision history

  1. #1

    Initiale Fassung

References