Unified Contact Center Express Editor Software vulnerabilities

Product

Unified Contact Center Express Editor Software

by Cisco · last CVE Apr 29, 2014

CVEs

On KEV

–

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 0Low 0

Severity

Exploitation

Watch

Add Unified Contact Center Express Editor Software to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2014-2180	–	1%	Apr 29	The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to… Affected: All versions, or not specified
CVE-2014-2102	–	1%	Feb 27	Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive… Affected: All versions, or not specified
CVE-2014-0746	–	1%	Feb 27	The disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows remote authenticated users to obtain sensitive information by reading extraneous… Affected: All versions, or not specified
CVE-2014-0745	–	1%	Feb 27	Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express (Unified CCX) allows remote attackers to hijack the… Affected: All versions, or not specified
CVE-2013-1214	–	1%	Apr 24	The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read… Affected: All versions, or not specified