Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6m2f-gr3g-wqw2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perform unauthorized actions.

A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perform unauthorized actions.

EPSS

Процентиль: 66%
0.00514
Низкий

7.5 High

CVSS3

Дефекты

CWE-20
CWE-918

Связанные уязвимости

CVSS3: 7.5
nvd
больше 6 лет назад

A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perform unauthorized actions.

CVSS3: 5.3
fstec
больше 6 лет назад

Уязвимость программного средства автоматизации работы операторов Unified Contact Center Express, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю провести атаку на стороне сервера на целевую систему и выполнить несанкционированные действия

EPSS

Процентиль: 66%
0.00514
Низкий

7.5 High

CVSS3

Дефекты

CWE-20
CWE-918