Unscored severity · published Jul 16, 2009
CVE-2009-2048
Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka…
–
CVSS
1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Crs · Cisco
3.5; 4.0; 4.1; 4.5; 5.0; 6.0; +1 more · source: NVD
CR
Customer Response Applications · Cisco
3.5 · source: NVD
IQ
IP QM · Cisco
3.5 · source: NVD
UC
Unified Ccx · Cisco
3.5; 4.0(1); 4.0(3); 4.0(4); 4.0(5); 4.0(5a); +5 more · source: NVD
UI
Unified IP Contact Center Express · Cisco
3.0; 5.0(1); 6.0(1); 7.0 · source: NVD
UI
Unified IP Ivr · Cisco
3.0; 3.1; 4.0; 4.1; 4.5; 5.0; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2048
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2048
osvdb.org
http://osvdb.org/55937
secunia.com
http://secunia.com/advisories/35861
Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/35705
www.securitytracker.com
http://www.securitytracker.com/id?1022569
www.vupen.com
http://www.vupen.com/english/advisories/2009/1913
More from Crs
–
CVE-2009-2047
Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX)…