6.1
Moyenne
CVE-2019-15278 A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker…
Description
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it handles requests. An attacker could exploit this vulnerability by submitting a crafted URL. A successful exploit could allow the attacker to gain unauthorized access to sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Finesse | Versions non publiées |
Références
- 20200108 Cisco Finesse Cross-Site Scripting Vulnerability tools.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Finesse
Les 9 CVE de Cisco Finesse →
CVE-2026-20362
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker…
7.2
Élevée
CVE-2026-20175
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote…
6.1
Moyenne
CVE-2025-20278
A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local…
6.0
Moyenne
CVE-2025-20112
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an…
5.1
Moyenne