Описание
The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133.
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:cisco:unified_contact_center_enterprise:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_contact_center_express_editor_software:-:*:*:*:*:*:*:*
EPSS
Процентиль: 17%
0.00055
Низкий
4 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
github
больше 3 лет назад
The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133.
EPSS
Процентиль: 17%
0.00055
Низкий
4 Medium
CVSS2
Дефекты
CWE-20