Unscored CVE-2009-2048 EUVD-2009-2044GHSA-xq48-v3hh-p87r

Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Ci…

Published Jul 16, 2009 · Updated Aug 7, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified vectors.

References

1022569 vdb-entry
unified-ccx-interface-xss(51730) vdb-entry
35861 third-party-advisory
55937 vdb-entry
ADV-2009-1913 vdb-entry
35705 vdb-entry
20090715 Vulnerabilities in Unified Contact Center Express Administration Pages vendor-advisory