Finesse (Cisco) - vulnerabilities (CVEs)

25 CVEs, 0 in the last 30 days, 119 known versions, newest CVE from 2025-06-04. Vendor: Cisco.

CVEs of Finesse

CVE-2025-20278 - CVSS 6.7 (medium), 2025-06-04: A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2024-20405 - CVSS 6.1 (medium), 2024-06-05: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by…
CVE-2024-20404 - CVSS 7.2 (high), 2024-06-05: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an…
CVE-2023-20088 - CVSS 7.5 (high), 2023-03-03: A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote…
CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…
CVE-2021-1358 - CVSS 6.1 (medium), 2021-05-22: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to redirect a user to an undesired web…
CVE-2021-1254 - CVSS 4.8 (medium), 2021-05-22: Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site…
CVE-2021-1245 - CVSS 6.5 (medium), 2021-01-13: Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in the web-based management interface of Cisco…
CVE-2021-1246 - CVSS 6.5 (medium), 2021-01-13: Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerability in the web…
CVE-2020-3159 - CVSS 6.1 (medium), 2020-02-19: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)…
CVE-2019-15278 - CVSS 6.1 (medium), 2020-01-26: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access…
CVE-2019-12632 - CVSS 7.5 (high), 2019-09-05: A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF)…
CVE-2018-0399 - CVSS 9.8 (critical), 2018-07-18: Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext…
CVE-2018-0398 - CVSS 9.8 (critical), 2018-07-18: Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side…
CVE-2017-6779 - CVSS 7.5 (high), 2018-06-07: Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow…
CVE-2017-12337 - CVSS 9.8 (critical), 2017-11-16: A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an…
CVE-2017-12288 - CVSS 6.1 (medium), 2017-10-19: A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a…
CVE-2017-6761 - CVSS 6.1 (medium), 2017-08-07: A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticated, remote attacker to conduct a…
CVE-2016-6442 - CVSS 8.8 (high), 2016-10-27: A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery…
CVE-2016-1373 - CVSS 8.6 (high), 2016-05-05: The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5,…
CVE-2015-4310 - CVSS 4.3 (medium), 2015-08-19: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2015-0754 - CVSS 7.5 (high), 2015-05-29: Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a…
CVE-2015-0714 - CVSS 4.3 (medium), 2015-05-02: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary…
CVE-2013-3455 - CVSS 5 (medium), 2013-08-12: Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732.
CVE-2013-3457 - CVSS 5 (medium), 2013-08-12: Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request to a…