FI
Product
Finesse
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 11Low 0
Watch
Add Finesse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0399 | 9.8 | Jul 18 | Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected… Affected: 11.5(1) |
| CVE-2018-0398 | 9.8 | Jul 18 | Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF)… Affected: 11.5(1) |
| CVE-2017-12337 | 9.8 | Nov 16 | A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote… Affected: All versions, or not specified |
| CVE-2016-6442 | 8.8 | Oct 27 | A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack… Affected: 11.0(1)_base |
| CVE-2016-1373 | 8.6 | May 5 | The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1,… Affected: 8.5(1)_base; 8.5(2)_base; 8.5(3)_base; 8.5(4)_base; 8.5(5)_base; 8.6(1)_base; +25 more |
| CVE-2023-20088 | 7.5 | Mar 3 | A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a… Affected: before 12.6\(1\); 12.6(1); 12.6(1); 12.6(1); 12.6(1) |
| CVE-2019-12632 | 7.5 | Sep 5 | A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected… Affected: 11.6(1); 12.0(1); 12.5(1) |
| CVE-2017-6779 | 7.5 | Jun 7 | Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,… Affected: 11.5 before 11.5\(3\); 9.5(1) |
| CVE-2025-20278 | 6.7 | Jun 4 | A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… Affected: 10.5(1); 10.5(1)_es1; 10.5(1)_es2; 10.5(1)_es3; 10.5(1)_es4; 10.5(1)_es5; +34 more |
| CVE-2024-20405 | 6.1 | Jun 5 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI… Affected: before 11.6\(1\); 11.6(1); 11.6(1); 11.6(1); 11.6(1); 11.6(1); +4 more |
| CVE-2021-1358 | 6.1 | May 22 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to redirect a user to an undesired web page Affected: through 12.6\(1\) |
| CVE-2021-1246 | 6.1 | Jan 13 | Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerability in the web management… Affected: before 12.0\(1\); 12.0(1); 12.0(1); 12.0(1); 12.0(1); 12.0(1); +6 more |
| CVE-2021-1245 | 6.1 | Jan 13 | Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in the web-based management interface of Cisco Finesse and Cisco… Affected: before 12.0\(1\); 12.0(1); 12.0(1); 12.0(1); 12.0(1); 12.0(1); +6 more |
| CVE-2020-3159 | 6.1 | Feb 19 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: before 12.5\(1\) |
| CVE-2019-15278 | 6.1 | Jan 26 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information… Affected: 11.6(1); 12.0(1); 12.5(1) |
| CVE-2017-12288 | 6.1 | Oct 19 | A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 11.5(1) |
| CVE-2017-6761 | 6.1 | Aug 7 | A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 10.6(1); 11.5(1) |
| CVE-2024-20404 | 5.3 | Jun 5 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system Affected: before 11.6\(1\); 11.6(1); 11.6(1); 11.6(1); 11.6(1); 11.6(1); +4 more |
| CVE-2021-1254 | 4.8 | May 22 | Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: before 12.6\(1\) |
| CVE-2015-4310 | – | Aug 19 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET… Affected: 10.5(1)_base |
| CVE-2015-0754 | – | May 29 | Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka… Affected: 10.5(1)_base |
| CVE-2015-0714 | – | May 2 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML… Affected: 10.0(1)_base; 10.5(1)_base; 10.6(1)_base; 11.0(1)_base |
| CVE-2013-3457 | – | Aug 12 | Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request to a directory URL, aka Bug ID… Affected: All versions, or not specified |
| CVE-2013-3455 | – | Aug 12 | Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732 Affected: All versions, or not specified |
Showing 24