CVE-2019-12632: falha de média gravidade em Cisco Finesse
Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 1.6%
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Cisco · Cisco FinesseCVEs relacionadas — Cisco Finesse
No mesmo produto, das mais perigosas para as menos.
CVE-2024-20404HIGHCVE-2024-20404EPSS 22.6%CVE-2019-15278MEDIUMCisco Finesse Cross-Site Scripting VulnerabilityEPSS 0.9%CVE-2020-3159MEDIUMCisco Finesse Web-Based Management Interface Cross-Site Scripting VulnerabilityEPSS 0.8%CVE-2024-20405MEDIUMCVE-2024-20405EPSS 0.6%CVE-2026-20362HIGHCisco Finesse Server-Side Request Forgery VulnerabilityEPSS 0.6%CVE-2025-20278MEDIUMCisco Unified Communications Products Command Injection VulnerabilityEPSS 0.2%