Количество 3
Количество 3
CVE-2024-20512
A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.
GHSA-5m9w-xmv2-hvwx
A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.
BDU:2024-08693
Уязвимость веб-интерфейса управления приложения для управления контакт-центром Cisco Unified Contact Center Management Portal (Unified CCMP), позволяющая нарушителю выполнить произвольный код в контексте уязвимого интерфейса или получить доступ к конфиденциальной информации в браузере
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-20512 A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад | |
GHSA-5m9w-xmv2-hvwx A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад | |
BDU:2024-08693 Уязвимость веб-интерфейса управления приложения для управления контакт-центром Cisco Unified Contact Center Management Portal (Unified CCMP), позволяющая нарушителю выполнить произвольный код в контексте уязвимого интерфейса или получить доступ к конфиденциальной информации в браузере | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу