Vulnerabilities (CVE)

Filtered by vendor Cisco Subscribe

Filtered by product Unified Contact Center Express Editor Software

Total 5 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2014-0745	1 Cisco	1 Unified Contact Center Express Editor Software	2023-12-10	6.8 MEDIUM	N/A
Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express (Unified CCX) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502.
CVE-2014-2102	1 Cisco	1 Unified Contact Center Express Editor Software	2023-12-10	4.0 MEDIUM	N/A
Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575.
CVE-2014-2180	1 Cisco	2 Unified Contact Center Enterprise, Unified Contact Center Express Editor Software	2023-12-10	4.0 MEDIUM	N/A
The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133.
CVE-2014-0746	1 Cisco	1 Unified Contact Center Express Editor Software	2023-12-10	4.0 MEDIUM	N/A
The disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536.
CVE-2013-1214	1 Cisco	1 Unified Contact Center Express Editor Software	2023-12-10	5.0 MEDIUM	N/A
The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.