Description
A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability exists because the web-based management interface of an affected system does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Affected products
- Cisco / Cisco Unified Contact Center Express10.5(1)SU1 – 10.5(1)SU1
- Cisco / Cisco Unified Contact Center Express10.6(1) – 10.6(1)
- Cisco / Cisco Unified Contact Center Express11.6(1) – 11.6(1)
- Cisco / Cisco Unified Contact Center Express10.6(1)SU1 – 10.6(1)SU1
- Cisco / Cisco Unified Contact Center Express10.6(1)SU3 – 10.6(1)SU3
- Cisco / Cisco Unified Contact Center Express11.6(2) – 11.6(2)
- Cisco / Cisco Unified Contact Center Express12.0(1) – 12.0(1)
- Cisco / Cisco Unified Contact Center Express11.0(1)SU1 – 11.0(1)SU1
- Cisco / Cisco Unified Contact Center Express11.5(1)SU1 – 11.5(1)SU1
- Cisco / Cisco Unified Contact Center Express10.5(1) – 10.5(1)
- Cisco / Cisco Unified Contact Center Express12.5(1) – 12.5(1)
- Cisco / Cisco Unified Contact Center Express12.5(1)SU1 – 12.5(1)SU1
- Cisco / Cisco Unified Contact Center Express12.5(1)SU2 – 12.5(1)SU2
- Cisco / Cisco Unified Contact Center Express12.5(1)SU3 – 12.5(1)SU3
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU03_ES01 – 12.5(1)_SU03_ES01
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU03_ES02 – 12.5(1)_SU03_ES02
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU02_ES03 – 12.5(1)_SU02_ES03
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU02_ES04 – 12.5(1)_SU02_ES04
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU02_ES02 – 12.5(1)_SU02_ES02
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU01_ES02 – 12.5(1)_SU01_ES02
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU01_ES03 – 12.5(1)_SU01_ES03
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU02_ES01 – 12.5(1)_SU02_ES01
- Cisco / Cisco Unified Contact Center Express11.6(2)ES07 – 11.6(2)ES07
- Cisco / Cisco Unified Contact Center Express11.6(2)ES08 – 11.6(2)ES08
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU01_ES01 – 12.5(1)_SU01_ES01
- Cisco / Cisco Unified Contact Center Express12.0(1)ES04 – 12.0(1)ES04
- Cisco / Cisco Unified Contact Center Express12.5(1)ES02 – 12.5(1)ES02
- Cisco / Cisco Unified Contact Center Express12.5(1)ES03 – 12.5(1)ES03
- Cisco / Cisco Unified Contact Center Express11.6(2)ES06 – 11.6(2)ES06
- Cisco / Cisco Unified Contact Center Express12.5(1)ES01 – 12.5(1)ES01
- Cisco / Cisco Unified Contact Center Express12.0(1)ES03 – 12.0(1)ES03
- Cisco / Cisco Unified Contact Center Express12.0(1)ES01 – 12.0(1)ES01
- Cisco / Cisco Unified Contact Center Express11.6(2)ES05 – 11.6(2)ES05
- Cisco / Cisco Unified Contact Center Express12.0(1)ES02 – 12.0(1)ES02
- Cisco / Cisco Unified Contact Center Express11.6(2)ES04 – 11.6(2)ES04
- Cisco / Cisco Unified Contact Center Express11.6(2)ES03 – 11.6(2)ES03
- Cisco / Cisco Unified Contact Center Express11.6(2)ES02 – 11.6(2)ES02
- Cisco / Cisco Unified Contact Center Express11.6(2)ES01 – 11.6(2)ES01
- Cisco / Cisco Unified Contact Center Express10.6(1)SU3ES03 – 10.6(1)SU3ES03
- Cisco / Cisco Unified Contact Center Express11.0(1)SU1ES03 – 11.0(1)SU1ES03
- Cisco / Cisco Unified Contact Center Express10.6(1)SU3ES01 – 10.6(1)SU3ES01
- Cisco / Cisco Unified Contact Center Express10.5(1)SU1ES10 – 10.5(1)SU1ES10
- Cisco / Cisco Unified Contact Center Express11.5(1)SU1ES03 – 11.5(1)SU1ES03
- Cisco / Cisco Unified Contact Center Express11.6(1)ES02 – 11.6(1)ES02
- Cisco / Cisco Unified Contact Center Express11.5(1)ES01 – 11.5(1)ES01
- Cisco / Cisco Unified Contact Center Express10.6(1)SU2 – 10.6(1)SU2
- Cisco / Cisco Unified Contact Center Express10.6(1)SU2ES04 – 10.6(1)SU2ES04
- Cisco / Cisco Unified Contact Center Express11.6(1)ES01 – 11.6(1)ES01
- Cisco / Cisco Unified Contact Center Express10.6(1)SU3ES02 – 10.6(1)SU3ES02
- Cisco / Cisco Unified Contact Center Express11.5(1)SU1ES02 – 11.5(1)SU1ES02
- Cisco / Cisco Unified Contact Center Express11.5(1)SU1ES01 – 11.5(1)SU1ES01
- Cisco / Cisco Unified Contact Center Express11.0(1)SU1ES02 – 11.0(1)SU1ES02
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU03_ES03 – 12.5(1)_SU03_ES03
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU03_ES04 – 12.5(1)_SU03_ES04
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU03_ES05 – 12.5(1)_SU03_ES05
- Cisco / Cisco Unified Contact Center ExpressUCCX 15.0.1 – UCCX 15.0.1
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU03_ES06 – 12.5(1)_SU03_ES06
- Cisco / Cisco Unified Contact Center Express12.5(1)_SU03_ES07 – 12.5(1)_SU03_ES07
- Cisco / Cisco Unified Contact Center Express15.0(1) – 15.0(1)
- Cisco / Cisco Unified Contact Center Express15.0(1)ES01 – 15.0(1)ES01
- Cisco / Cisco Unified Contact Center Express15.0(1)ES-MSOauth – 15.0(1)ES-MSOauth
- Cisco / Cisco Unified Contact Center Express1501_ES01_CSCws06843 – 1501_ES01_CSCws06843
- Cisco / unified_contact_center_express15.0\(1\)ES01
Updated 9m ago · 8 sources