Skip to content
OpenAdvisories
Medium WID-SEC-2026-3794 1 CVE

Cisco Finesse, Unified CCE, Unified CCX: Schwachstelle ermöglicht Offenlegung von Informationen

Published Oct 7, 2026 · Updated Oct 7, 2026 · de-DE

Vendor: Cisco Product: Finesse Product: Unified Contact Center Enterprise Product: Unified Contact Center Express (UCCX)

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Finesse, Unified CCE und Unified CCX ausnutzen, um Informationen offenzulegen, indem er Server-Side Request Forgery (SSRF)-Angriffe durchführt.

Product

Cisco Finesse integriert traditionelle Contact-Center-Funktionen web-basiert in einen Thin-Client-Desktop.

Vulnerabilities 1

  • High 7.2
    CVE-2026-20362

    Cisco Finesse Server-Side Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for…

    Cisco Cisco Finesse Network devices

Revision history

  1. #1

    Initiale Fassung

References