Finesse vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

FI

Product

Finesse

by Cisco · last CVE Jun 4, 2025

24

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities24 In the news0 Timeline

Severity mix

Critical 3High 5Medium 11Low 0

Severity

All severities24 Critical3 High5 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Finesse to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-20278	6.7	0%	Jun 4	A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… Affected: 10.5(1); 10.5(1)_es1; 10.5(1)_es2; 10.5(1)_es3; 10.5(1)_es4; 10.5(1)_es5; +34 more
CVE-2024-20405	6.1	1%	Jun 5	A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI… Affected: before 11.6\(1\); 11.6(1); 11.6(1); 11.6(1); 11.6(1); 11.6(1); +4 more
CVE-2021-1358	6.1	1%	May 22	A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to redirect a user to an undesired web page Affected: through 12.6\(1\)
CVE-2021-1246	6.1	1%	Jan 13	Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerability in the web management… Affected: before 12.0\(1\); 12.0(1); 12.0(1); 12.0(1); 12.0(1); 12.0(1); +6 more
CVE-2021-1245	6.1	1%	Jan 13	Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in the web-based management interface of Cisco Finesse and Cisco… Affected: before 12.0\(1\); 12.0(1); 12.0(1); 12.0(1); 12.0(1); 12.0(1); +6 more
CVE-2020-3159	6.1	1%	Feb 19	A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: before 12.5\(1\)
CVE-2019-15278	6.1	1%	Jan 26	A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information… Affected: 11.6(1); 12.0(1); 12.5(1)
CVE-2017-12288	6.1	1%	Oct 19	A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 11.5(1)
CVE-2017-6761	6.1	1%	Aug 7	A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 10.6(1); 11.5(1)
CVE-2024-20404	5.3	23%	Jun 5	A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system Affected: before 11.6\(1\); 11.6(1); 11.6(1); 11.6(1); 11.6(1); 11.6(1); +4 more
CVE-2021-1254	4.8	1%	May 22	Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: before 12.6\(1\)