5.0
Moyenne
CVE-2026-20314 A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise…
Description
A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Packaged Contact Center Enterprise | Versions non publiées | |
| Cisco Unified Contact Center Enterprise | 11.5 | Pas de correctif indiqué |
| Cisco Unified Contact Center Enterprise | 11.0 | Pas de correctif indiqué |
| Cisco Unified Contact Center Enterprise | 10.5 | Pas de correctif indiqué |
Références
- cisco-sa-ucce-pcce-ssrf-TghHxD sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Packaged Contact Center Enterprise
Les 10 CVE de Cisco Packaged Contact Center Enterprise →
CVE-2026-20109
Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged…
4.8
Moyenne
CVE-2026-20055
Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged…
4.8
Moyenne
CVE-2025-20377
A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote…
4.3
Moyenne
CVE-2024-20405
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker…
4.8
Moyenne