5.4
Medium
CVE-2021-1599 A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal (CVP) could allow an…
Description
A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary code in the context of the interface, access sensitive, browser-based information, or cause an affected device to reboot under certain conditions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Unified Customer Voice Portal (CVP) | Versions not published |
References
Timeline
- Published
- Last modified
Other CVEs of Cisco Unified Customer Voice Portal (CVP)
The 4 CVEs of Cisco Unified Customer Voice Portal (CVP) →
CVE-2021-1245
Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in the…
6.5
Medium
CVE-2021-1246
Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access…
6.5
Medium
CVE-2019-16017
A vulnerability in the Operations, Administration, Maintenance and Provisioning (OAMP) OpsConsole Server for Cisco…
6.8
Medium