Show filters
70 Total Results
Displaying 51-60 of 70
Sort by:
Attacker Value
Unknown
CVE-2016-6426
Disclosure Date: October 05, 2016 (last updated November 25, 2024)
The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to create user accounts by visiting an unspecified web page, aka Bug IDs CSCuy75027 and CSCuy81653.
0
Attacker Value
Unknown
CVE-2016-1439
Disclosure Date: June 23, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650.
0
Attacker Value
Unknown
CVE-2016-1298
Disclosure Date: January 26, 2016 (last updated November 25, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033.
0
Attacker Value
Unknown
CVE-2014-3323
Disclosure Date: July 18, 2014 (last updated October 05, 2023)
Directory traversal vulnerability in Cisco Unified Contact Center Enterprise allows remote authenticated users to read arbitrary web-root files via a crafted URL, aka Bug ID CSCun25262.
0
Attacker Value
Unknown
CVE-2014-2180
Disclosure Date: April 29, 2014 (last updated October 05, 2023)
The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133.
0
Attacker Value
Unknown
CVE-2014-0745
Disclosure Date: February 27, 2014 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express (Unified CCX) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502.
0
Attacker Value
Unknown
CVE-2014-2102
Disclosure Date: February 27, 2014 (last updated October 05, 2023)
Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575.
0
Attacker Value
Unknown
CVE-2014-0746
Disclosure Date: February 27, 2014 (last updated October 05, 2023)
The disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536.
0
Attacker Value
Unknown
CVE-2013-1214
Disclosure Date: April 24, 2013 (last updated October 05, 2023)
The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.
0
Attacker Value
Unknown
CVE-2011-2583
Disclosure Date: May 02, 2012 (last updated October 04, 2023)
Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834.
0
