Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Finesse, Cisco Unified Intelligence Center und Cisco Unified Contact Center Express (UCCX) ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
Product
Cisco Finesse integriert traditionelle Contact-Center-Funktionen web-basiert in einen Thin-Client-Desktop.
Cisco Unified Intelligence Center ist eine webbasierte Berichtsanwendung für Contact Center.
Cisco Unified Contact Center Express (UCCX) ist die Kontaktverwaltung für Cisco Unified Communications.
Vulnerabilities 2
-
Medium 6.1
Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities
A vulnerability in the web-based management interface of Cisco Finesse, Cisco Packaged Contact Center Enterprise (Packaged CCE), Cisco Unified Contact Center Enterprise (Unified CCE), Cisco Unified Contact Center Express (Unified CCX), and Cisco Unified…
-
Medium 6.1
Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities
A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability exist…
Revision history
-
#1
Initiale Fassung
References
-
Cisco Security Advisory vom 2026-03-11
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-xss-MrNAH5Jh