Логотип exploitDog
bind:CVE-2024-20512
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-20512

Количество 3

Количество 3

nvd логотип

CVE-2024-20512

больше 1 года назад

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-5m9w-xmv2-hvwx

больше 1 года назад

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

CVSS3: 6.1
EPSS: Низкий
fstec логотип

BDU:2024-08693

больше 1 года назад

Уязвимость веб-интерфейса управления приложения для управления контакт-центром Cisco Unified Contact Center Management Portal (Unified CCMP), позволяющая нарушителю выполнить произвольный код в контексте уязвимого интерфейса или получить доступ к конфиденциальной информации в браузере

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-20512

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

CVSS3: 6.1
0%
Низкий
больше 1 года назад
github логотип
GHSA-5m9w-xmv2-hvwx

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

CVSS3: 6.1
0%
Низкий
больше 1 года назад
fstec логотип
BDU:2024-08693

Уязвимость веб-интерфейса управления приложения для управления контакт-центром Cisco Unified Contact Center Management Portal (Unified CCMP), позволяющая нарушителю выполнить произвольный код в контексте уязвимого интерфейса или получить доступ к конфиденциальной информации в браузере

CVSS3: 6.1
0%
Низкий
больше 1 года назад

Уязвимостей на страницу