EUVD-2025-16884
Command Injection (CWE-77)
2025-06-04
psirt@cisco.com
6.0
CVSS 3.1 · NVD
View
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Command injection prevention
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | Full system compromise — the attacker can execute any command with the privileges of the vulnerable application process. With a CVSS score of 6.0 (MEDIUM), this represents a moderate risk. |
| Exploit ScenarioDerived | An attacker injects shell metacharacters (;, |, &&) into a parameter that is passed to a system command, causing additional commands to be executed. |
This Month
Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).
No patch listed yet
0.0% exploitation probability (EPSS)
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 14, 2026
A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user.
This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.
Earlier versions of this analysis (1)
v1
Mar 14, 2026 - 17:29
CVSS 6.0
RemediationAI
Avoid passing user input to system commands. Use language-specific APIs instead of shell commands. If unavoidable, use strict input validation and escaping.
Affected VersionsENISA
Cisco Unified Contact Center Express 12.5(1)_SU01_ES03
Cisco Unified Intelligence Center 11.0(3)
Cisco Finesse 12.5(1)ES4
Cisco Virtualized Voice Browser 11.5(1)
Cisco Finesse 10.5(1)ES3
Cisco Finesse 12.0(1)ES4
Cisco Virtualized Voice Browser 12.6(2)ET_CSCwj87296
Cisco Unity Connection 14SU4
Cisco Unified Communications Manager IM and Presence Service Recovery ISO
Cisco Virtualized Voice Browser 12.6(2)_ES06
Cisco Unified Intelligence Center 12.6(2)_ET
Cisco Unified Communications Manager 12.5(1)
Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU8
Cisco Unified Intelligence Center 12.6.1_ExcelIssue_ET
Cisco Unified Intelligence Center 11.0(1)
Cisco Finesse 12.0(1)ES3
Cisco Virtualized Voice Browser 12.6(1)_ET
Cisco Finesse 12.0(1)ES1
Cisco Unified Contact Center Express 12.5(1)_SU03_ES06
Cisco SocialMiner 10.6(2)
Cisco Virtualized Voice Browser 11.5(1)ES27
Cisco Finesse 12.0(1)ES8
Cisco Virtualized Voice Browser 12.5(1)_ES14
Cisco Virtualized Voice Browser 12.5(1)_ES03
Cisco Finesse 11.0(1)ES5
Cisco Finesse 11.5(1)ES5
Cisco Unified Communications Manager 12.5(1)SU8a
Cisco Virtualized Voice Browser 12.6.2-ET01-SSL
Cisco Virtualized Voice Browser 12.0(1)_ES04
Cisco Finesse 12.6(2)ES2
Cisco SocialMiner 12.0(1)ES02
Cisco Finesse 12.6(1)ES9
Cisco Unified Contact Center Express 11.6(1)ES02
Cisco Unified Contact Center Express 11.6(2)ES02
Cisco SocialMiner 11.6(2)
Cisco Unified Communications Manager 15SU1a
Cisco Virtualized Voice Browser 12.6.2ET_CSCwf55306
Cisco Finesse 11.5(1)ES1
Cisco Virtualized Voice Browser 12.0(1)_ES08
Cisco Finesse 11.0(1)ES1
Cisco Virtualized Voice Browser 12.6.2-ET
Cisco Unified Contact Center Express 10.6(1)SU3ES03
Cisco Unified Contact Center Express 11.6(2)ES05
Cisco Finesse 10.5(1)ES4
Cisco Virtualized Voice Browser 12.5(1)_ES16
Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU2
Cisco Unified Contact Center Express 10.0(1)SU1ES04
Cisco Unified Contact Center Express 11.5(1)SU1ES02
Cisco Unified Communications Manager IM and Presence Service 14SU3
Cisco SocialMiner 12.0(1)
Cisco Virtualized Voice Browser 12.6(1)_ES03
Cisco Unified Contact Center Express 11.6(2)ES04
Cisco Virtualized Voice Browser 12.5(1)SU
Cisco Finesse 10.5(1)ES9
Cisco Unified Contact Center Express 12.0(1)ES04
Cisco Unified Contact Center Express 11.6(2)
Cisco Unity Connection 12.5(1)SU8
Cisco Unified Intelligence Center 12.6(1)_ES05_ET
Cisco Unified Intelligence Center 12.6(2)_Permalink_ET
Cisco Virtualized Voice Browser 12.5(1)_SU_ES01
Cisco Unified Intelligence Center 10.5(1)
Cisco Virtualized Voice Browser 11.6(1)_ES85
Cisco Unified Contact Center Express 11.0(1)SU1
Cisco Finesse 11.6(1)ES3
Cisco Finesse 12.5(1)ES6
Cisco Virtualized Voice Browser 12.6(1)_ES02
Cisco Virtualized Voice Browser 12.6(1)_ES07
Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU5
Cisco Finesse 11.6(1)ES11
Cisco Virtualized Voice Browser 12.0(1)_ES06
Cisco Unified Communications Manager IM and Presence Service 14SU4
Cisco Finesse 10.5(1)ES1
Cisco Finesse 10.5(1)ES5
Cisco Finesse 12.5(1)ES5
Cisco Unified Contact Center Express 12.5(1)ES03
Cisco Finesse 11.6(1)ES8
Cisco Finesse 12.0(1)
Cisco Virtualized Voice Browser 12.5(1)_ES09
Cisco Unified Communications Manager 12.5(1)SU2
Cisco Virtualized Voice Browser 11.5(1)ES36
Cisco Virtualized Voice Browser 11.6(1)_ES22
Cisco SocialMiner 10.6(1)
Cisco Finesse 12.6(1)ES1
Cisco SocialMiner 11.0(1)
Cisco Virtualized Voice Browser 12.5(1)_ES04
Cisco Unified Contact Center Express 10.6(1)SU2ES04
Cisco Finesse 12.6(1)ES5
Cisco Finesse 12.6(1)ES8
Cisco Unified Communications Manager 12.5(1)SU7
Cisco Finesse 12.5(1)ES3
Cisco Unified Contact Center Express 11.6(2)ES03
Cisco Unified Communications Manager 12.5(1)SU8
Cisco Unified Contact Center Express 10.6(1)SU2
Cisco Unity Connection 12.5(1)SU9
Cisco Unified Contact Center Express 11.6(1)ES01
Cisco Unified Intelligence Center 12.5(1)SU
Cisco Virtualized Voice Browser 11.6(1)_ES81
Cisco Virtualized Voice Browser 12.6.2ET_RTPfallback
Cisco Unified Contact Center Express 12.5(1)SU1
Cisco Virtualized Voice Browser 12.5(1)_ES02
Cisco Unified Intelligence Center 11.6(1)
Cisco Unified Contact Center Express 12.0(1)ES02
Cisco Virtualized Voice Browser 12.5(2)_ET
Cisco Finesse 11.6(1)ES5
Cisco Unified Communications Manager 12.5(1)SU4
Cisco Finesse 12.6(1)ES6
Cisco Unified Intelligence Center 12.6(1)_ET
Cisco SocialMiner 12.0(1)ES03
Cisco Unified Contact Center Express 12.5(1)_SU03_ES03
Cisco Virtualized Voice Browser 11.5(1)ES29
Cisco Virtualized Voice Browser 12.0(1)_ES03
Cisco Virtualized Voice Browser 12.6(2)ET_NuanceMix
Cisco Finesse 12.6(2)ES3
Cisco Unified Contact Center Express 10.6(1)SU3
Cisco SocialMiner 12.5(1)SU3
Cisco Unified Contact Center Express 10.5(1)SU1
Cisco Finesse 11.0(1)ES7
Cisco Virtualized Voice Browser 12.6(2)_ET_Streaming
Cisco Unity Connection 14SU2
Cisco Unified Intelligence Center 12.0(1)
Cisco Virtualized Voice Browser 12.6(2)_ET01
Cisco Unified Contact Center Express 11.6(2)ES01
Cisco Virtualized Voice Browser 12.5(1)_ES07
Cisco Finesse 11.6(1)ES1
Cisco Finesse 12.6(1)ES7_ET
Cisco Finesse 10.5(1)ES2
Cisco SocialMiner 10.5(1)
Cisco Unified Contact Center Express 12.5(1)_SU02_ES01
Cisco Finesse 12.0(1)ES5
Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU1
Cisco Finesse 11.0(1)ES_Rollback
Cisco Finesse 12.6(1)ES10
Cisco Unity Connection 15
Cisco Unified Communications Manager 12.5(1)SU5
Cisco Unified Contact Center Express 8.5(1)
Cisco Unified Contact Center Express 10.6(1)SU1
Cisco Virtualized Voice Browser 12.0(1)_ES07
Cisco Virtualized Voice Browser 12.5(1)_ES10
Cisco SocialMiner 11.6(1)
Cisco Unified Communications Manager 14SU4a
Cisco Virtualized Voice Browser 12.6(2)_ES02
Cisco Finesse 11.6(1)ES6
Cisco Finesse 11.6(1)ES
Cisco Finesse 12.5(1)
Cisco Unified Contact Center Express 12.5(1)_SU03_ES04
Cisco Unity Connection 12.5(1)
Cisco Unity Connection 12.5(1)SU4
Cisco Unified Contact Center Express 10.6(1)
Cisco Unified Communications Manager 12.5(1)SU9
Cisco Unity Connection 12.5(1)SU7
Cisco Unity Connection 15SU1
Cisco Virtualized Voice Browser 11.5(1)_ES29
Cisco Unity Connection 14SU1
Cisco Virtualized Voice Browser 11.5(1)ES43
Cisco Unified Communications Manager 12.5(1)SU3
Cisco Unified Contact Center Express 12.5(1)
Cisco SocialMiner 12.5(1)ES01
Cisco Virtualized Voice Browser 11.6(1)_ES86
Cisco Virtualized Voice Browser 12.5(1)_ES15
Cisco Unified Contact Center Express 12.5(1)_SU02_ES02
Cisco Unified Contact Center Express 11.0(1)SU1ES02
Cisco Finesse 11.6(1)ES7
Cisco SocialMiner 11.5(1)
Cisco Finesse 11.0(1)
Cisco Unified Contact Center Express 11.6(1)
Cisco Unified Intelligence Center 12.6(1)
Cisco Unified Contact Center Express 12.5(1)_SU03_ES01
Cisco Unified Communications Manager IM and Presence Service 15SU1
Cisco Finesse 11.6(1)ES9
Cisco Finesse 12.5(2)
Cisco Unified Intelligence Center 12.6(2)_504_Issue_ET
Cisco Finesse 12.6(1)ES2
Cisco Virtualized Voice Browser 12.5(1)_ES08
Cisco Finesse 11.6(1)
Cisco SocialMiner 12.5(1)SU1
Cisco Virtualized Voice Browser 11.6(1)_ES88
Cisco Virtualized Voice Browser 11.6(1)_ES83
Cisco Finesse 11.5(1)
Cisco Virtualized Voice Browser 12.5(1)_ES06
Cisco Unified Communications Manager 14SU4
Cisco Unity Connection 14SU3a
Cisco Finesse 12.5(1)ES1
Cisco Finesse 11.6(1)FIPS
Cisco Finesse 12.5(1)_SU
Cisco Virtualized Voice Browser 12.6(2)ET_FileUpload
Cisco Finesse 11.5(1)ES2
Cisco Unified Intelligence Center 12.5(1)
Cisco Virtualized Voice Browser 12.6(2)_ES05
Cisco Finesse 11.0(1)ES6
Cisco Virtualized Voice Browser 12.5(1)_SU_ES02
Cisco Unity Connection 14SU3
Cisco Virtualized Voice Browser 12.5(1)_ES05
Cisco Virtualized Voice Browser 12.6(2)_ES01
Cisco SocialMiner 12.5(1)
Cisco Finesse 11.5(1)ES3
Cisco Unified Intelligence Center 11.0(2)
Cisco Unified Contact Center Express 12.5(1)_SU03_ES02
Cisco Unified Contact Center Express 11.5(1)SU1ES03
Cisco Unified Communications Manager IM and Presence Service 14SU2
Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU3
Cisco Unified Communications Manager 14SU1
Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU9
Cisco Unified Contact Center Express 12.0(1)ES03
Cisco Unified Communications Manager IM and Presence Service 12.5(1)
Cisco Virtualized Voice Browser 12.6(1)_ES01
Cisco Virtualized Voice Browser 12.5.2 ET-CSCwj33374
Cisco Unified Contact Center Express 12.5(1)ES01
Cisco Unified Contact Center Express 11.5(1)SU1
Cisco Virtualized Voice Browser 12.6(2)_ES04
Cisco Virtualized Voice Browser 12.6.2_ET_CX_ALAW
Cisco Finesse 11.6(1)ES10
Cisco Virtualized Voice Browser 11.0(1)
Cisco Unified Contact Center Express 11.6(2)ES06
Cisco Finesse 10.5(1)
Cisco Unified Communications Manager 12.5(1)SU7a
Cisco Unified Contact Center Express 11.6(2)ES08
Cisco Finesse 11.6(1)ES4
Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU6
Cisco Virtualized Voice Browser 12.6(2)_ET02
Cisco Unified Contact Center Express 12.0(1)ES01
Cisco Unified Intelligence Center 12.6.2_CSCwn48501_ET
Cisco Unified Intelligence Center 12.6.2_CSCwm96922_ET
Cisco Unified Communications Manager IM and Presence Service 14SU2a
Cisco Finesse 11.0(1)ES2
Cisco SocialMiner 12.5(1)SU2
Cisco Virtualized Voice Browser 12.6(1)_ES06
Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU7
Cisco Unity Connection 12.5(1)SU5
Cisco Unified Intelligence Center 12.6.2_Amq_OOS_ET
Cisco Finesse 12.6(1)ES11
Cisco Virtualized Voice Browser 11.6(1)_ES84
Cisco Finesse 12.6(1)ES3
Cisco Unified Communications Manager 15SU1
Cisco Finesse 12.6(2)ES4
Cisco Finesse 12.6(1)ES7
Cisco Unity Connection 12.5(1)SU3
Cisco Unified Intelligence Center 12.6.2_CSCwk19536_ET
Cisco Virtualized Voice Browser 12.6(2)ET_Transcribe
Cisco Virtualized Voice Browser 12.5.2_ET_CSCvz27014
Cisco Virtualized Voice Browser 12.5(1)_ES12
Cisco Virtualized Voice Browser 12.5(1) SU ET
Cisco Unified Contact Center Express 10.5(1)SU1ES10
Cisco Unified Contact Center Express 12.5(1)_SU01_ES02
Cisco Finesse 12.0(1)ES2
Cisco Unified Communications Manager 14SU2
Cisco Virtualized Voice Browser 12.6(2)
Cisco Virtualized Voice Browser 12.6(1)_ES09
Cisco Unified Communications Manager IM and Presence Service 14
Cisco Finesse 12.6(1)ES4
Cisco Virtualized Voice Browser 11.5(1)_ES53
Cisco Unified Communications Manager 12.5(1)SU1
Cisco Finesse 12.5(1)SU ES1
Cisco Unified Communications Manager 12.5(1)SU6
Cisco Finesse 11.0(1)ES4
Cisco Virtualized Voice Browser 12.5(1)_ES13
Cisco Unified Contact Center Express 12.5(1)_SU02_ES03
Cisco Finesse 12.6(2)ES1
Cisco Finesse 11.6(1)ES2
Cisco Unified Communications Manager 15
Cisco Unified Contact Center Express 12.5(1)_SU01_ES01
Cisco Unified Contact Center Express 11.0(1)SU1ES03
Cisco Virtualized Voice Browser 12.6(1)_ES08
Cisco Virtualized Voice Browser 12.0(1)_ES01
Cisco Unity Connection 14
Cisco Virtualized Voice Browser 12.6(1)_ES05
Cisco Virtualized Voice Browser 12.6(1)_ES04
Cisco Finesse 12.5(1)SU ES3
Cisco Unity Connection 12.5(1)SU8a
Cisco Virtualized Voice Browser 11.5(1)_ES43
Cisco Virtualized Voice Browser 12.5(1)_ES17
Cisco Finesse 10.5(1)ES8
Cisco Unified Contact Center Express 12.5(1)ES02
Cisco Finesse 10.5(1)ES10
Cisco Virtualized Voice Browser 12.6(2)ET_CSCwk83135
Cisco Virtualized Voice Browser 11.5(1)_ES36
Cisco Finesse 12.5(1)ES2
Cisco Virtualized Voice Browser 12.6(2)_ET
Cisco Finesse 12.5(1)SU
Cisco Unified Intelligence Center 12.6(2)
Cisco Unified Contact Center Express 11.6(2)ES07
Cisco Unified Contact Center Express 11.5(1)SU1ES01
Cisco Virtualized Voice Browser 12.5(1)_ES11
Cisco Unified Communications Manager IM and Presence Service 15
Cisco Virtualized Voice Browser 12.6.2_ET_CSCwj36712
Cisco Unified Contact Center Express 12.0(1)
Cisco Finesse 12.5(1)SU ES2
Cisco Finesse 12.5(1)ES7
Cisco SocialMiner 11.5(1)SU1
Cisco Virtualized Voice Browser 12.6(2)_ES03
Cisco Unified Communications Manager 14
Cisco Unified Communications Manager IM and Presence Service 14SU1
Cisco SocialMiner 12.0(1)ES04
Cisco Finesse 12.0(1)ES7
Cisco Unified Contact Center Express 10.5(1)
Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU4
Cisco Finesse 12.6(2)
Cisco Finesse 12.5(1)ES8
Cisco Virtualized Voice Browser 11.5(1)_ES54
Cisco Virtualized Voice Browser 12.6(1)_ES10
Cisco Finesse 11.0(1)ES3
Cisco Unified Contact Center Express 10.6(1)SU3ES01
Cisco Virtualized Voice Browser 12.0(1)
Cisco Unity Connection 12.5(1)SU2
Cisco Virtualized Voice Browser 12.0(1)_ES02
Cisco Virtualized Voice Browser 12.0(1)_ES05
Cisco Virtualized Voice Browser 11.6(1)
Cisco Unified Contact Center Express 10.6(1)SU3ES02
Cisco Virtualized Voice Browser 11.5(1)_ES32
Cisco Finesse 12.6(1)
Cisco Unity Connection 12.5(1)SU6
Cisco Finesse 10.5(1)ES6
Cisco Virtualized Voice Browser 12.6(1)
Cisco Virtualized Voice Browser 11.5(1)_ES27
Cisco Unified Contact Center Express 10.0(1)SU1
Cisco Unified Contact Center Express 12.5(1)_SU03_ES05
Cisco Virtualized Voice Browser 11.6(1)_ES87
Cisco Virtualized Voice Browser 11.6(1)_ES82
Cisco Unified Intelligence Center 12.5(2)ET_CSCwi79933
Cisco Unified Contact Center Express 11.5(1)ES01
Cisco Unified Contact Center Express 9.0(2)SU3ES04
Cisco Virtualized Voice Browser 11.6(1)_ES80
Cisco Virtualized Voice Browser 12.5(1)
Cisco Unified Contact Center Express 12.5(1)SU3
Cisco Finesse 12.0(1)ES6
Cisco Virtualized Voice Browser 11.5(1)ES32
Cisco Finesse 12.6(2)ES5
Cisco Finesse 10.5(1)ES7
Cisco Unified Communications Manager 14SU3
Cisco Unified Contact Center Express 12.5(1)_SU02_ES04
Cisco Unified Contact Center Express 12.5(1)SU2
Cisco Finesse 11.5(1)ES6
Cisco Unity Connection 12.5(1)SU1
Cisco Finesse 11.5(1)ES4
Cisco Virtualized Voice Browser 12.5(1)_SU
Cisco Unified Intelligence Center 11.5(1)
Affected Packages
euvd
cisco_unified_intelligence_center
no fix
euvd
cisco_virtualized_voice_browser
no fix
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 2 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Command injection allows an attacker to execute arbitrary OS commands on the host system through a vulnerable application that passes user input to system shells.
Know when Finesse gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
NVD
PRIMARY
6.0
MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Executive ViewAI
Why It Matters
CVE-2025-20278 presents moderate security risk, a command injection vulnerability rated CVSS 6.0. Exploitation could allow attackers to execute code or inject malicious input. Organizations should apply vendor updates when available and monitor for exploitation.
Business Impact:
Low
Compensating Controls
Apply vendor patch. If patching is delayed: deploy WAF rules, restrict network access, enable logging.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
SignalValue
Severity
MEDIUM
CISA KEV
No
Public POC
No
EPSS
0.0%
Patch available
No
Active threat
No
Deciding rule
MEDIUM severity (CVSS 4.0-6.9)
What every action level means
Emergency
Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now
Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week
Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month
Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor
Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.
SSVC AssessmentENISA
SSVC Decision· derived
Defer
Exploitation· derived
None
System Exposure· derived
Small
Automatable· derived
No
Human Impact
Low
Priority Score
30
Low
Medium
High
Critical
KEV: 0
EPSS: 0
CVSS: +30
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0
Attack Technique
OS Command Injection
CRITICAL
OS command injection occurs when an application passes unsanitized user input directly into system shell commands.
CVE-2021-44228
CRITICAL
POC
10.0
Dec 10
Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote c
CVE-2017-12337
CRITICAL
9.8
Nov 16
A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System softw
CVE-2018-0399
CRITICAL
9.8
Jul 18
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote a
CVE-2018-0398
CRITICAL
9.8
Jul 18
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote a
CVE-2024-20404
MEDIUM
POC
5.3
Jun 05
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker t
CVE-2016-6442
HIGH
8.8
Oct 27
A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker t
CVE-2016-1373
HIGH
8.6
May 05
The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1
CVE-2015-0754
HIGH
7.5
May 29
Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CP
CVE-2023-20088
HIGH
7.5
Mar 03
A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse co
CVE-2019-12632
HIGH
7.5
Sep 05
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a
CVE-2017-12288
MEDIUM
6.1
Oct 19
A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthentic
CVE-2017-6761
MEDIUM
6.1
Aug 07
A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticate
GitHub PoC
Exploit-DB