6.5
Moyenne
CVE-2019-1877 A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to…
Description
A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sessions. The vulnerability is due to insufficient authentication mechanisms on the file download function of the API. An attacker could exploit this vulnerability by sending a crafted request to the API. A successful exploit could allow the attacker to download files that other users attach through the chat feature. This vulnerability affects versions prior to 12.0(1)ES1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Enterprise Chat and Email | Versions non publiées |
Références
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Enterprise Chat and Email
Les 13 CVE de Cisco Enterprise Chat and Email →
CVE-2026-20172
A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated,…
4.3
Moyenne
CVE-2025-20310
A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker…
6.1
Moyenne
CVE-2025-20139
A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated,…
7.5
Élevée
CVE-2022-20633
A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote…
5.3
Moyenne