Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Unified Intelligence Center und Cisco Unified Contact Center Express (UCCX) ausnutzen, um seine Privilegien zu erhöhen.
Product
Cisco Unified Intelligence Center ist eine webbasierte Berichtsanwendung für Contact Center.
Cisco Unified Contact Center Express (UCCX) ist die Kontaktverwaltung für Cisco Unified Communications.
Vulnerabilities 2
-
High 7.1
Cisco Unified Intelligence Center Privilege Escalation Vulnerability
A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of…
-
Medium 4.3
Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability
A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validation of user-supplied para…
Revision history
-
#1
Initiale Fassung
References
-
Cisco Security Advisory vom 2025-05-21
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuis-priv-esc-3Pk96SU4