CVE-2024-20405mediumCWE-20

CVE-2024-20405: falha de média gravidade em Cisco Finesse

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco Unified Contact Center Express+ Monitorar Cisco Finesse

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.8epss 0.6%
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI vulnerability. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent to an affected device. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive information on the affected device.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Cisco · Cisco FinesseCisco · Cisco Packaged Contact Center EnterpriseCisco · Cisco Unified Contact Center EnterpriseCisco · Cisco Unified Contact Center Express
CVEs relacionadas — Cisco Finesse

No mesmo produto, das mais perigosas para as menos.

CVE-2024-20404HIGHCVE-2024-20404EPSS 22.6%CVE-2025-20242MEDIUMCVE-2025-20242EPSS 5.9%CVE-2024-20253CRITICALCVE-2024-20253EPSS 2.4%CVE-2019-12632MEDIUMCisco Finesse Request Processing Server-Side Request Forgery VulnerabilityEPSS 1.6%CVE-2019-15278MEDIUMCisco Finesse Cross-Site Scripting VulnerabilityEPSS 0.9%CVE-2020-3163MEDIUMCisco Unified Contact Center Enterprise Denial of Service VulnerabilityEPSS 0.9%