7.2
High
CVE-2026-20362 A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker…
Description
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain limited sensitive information for services that are associated with the affected device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Finesse | Versions not published |
References
- cisco-sa-finesse-ssrf-mmSuyugS sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Finesse
The 9 CVEs of Cisco Finesse →
CVE-2026-20175
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote…
6.1
Medium
CVE-2025-20278
A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local…
6.0
Medium
CVE-2025-20112
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an…
5.1
Medium
CVE-2024-20405
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker…
4.8
Medium