Cisco Webex Contact Center
Monthly
An unauthenticated remote attacker could execute cross-site scripting in Cisco Webex Contact Center’s Desktop Agent, stealing authentication and session data from victims who clicked a malicious link. Cisco fully patched the cloud service, eliminating the vulnerability without requiring any customer action. No active exploitation has been reported, and EPSS indicates very low exploitation probability.
An unauthenticated remote attacker could execute cross-site scripting in Cisco Webex Contact Center’s Desktop Agent, stealing authentication and session data from victims who clicked a malicious link. Cisco fully patched the cloud service, eliminating the vulnerability without requiring any customer action. No active exploitation has been reported, and EPSS indicates very low exploitation probability.