6.1
Medium
CVE-2019-15278 A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker…
Description
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it handles requests. An attacker could exploit this vulnerability by submitting a crafted URL. A successful exploit could allow the attacker to gain unauthorized access to sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Finesse | Versions not published |
References
- 20200108 Cisco Finesse Cross-Site Scripting Vulnerability tools.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Finesse
The 9 CVEs of Cisco Finesse →
CVE-2026-20362
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker…
7.2
High
CVE-2026-20175
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote…
6.1
Medium
CVE-2025-20278
A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local…
6.0
Medium
CVE-2025-20112
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an…
5.1
Medium