Known vulnerabilities in Cisco Finesse

Known vulnerabilities in Cisco Finesse

Vendor: Cisco Systems, Inc

Software: Cisco Finesse

Software CPE: cpe:2.3:a:cisco_systems:cisco_finesse:*:*:*:*:*:*:*:*

Website: https://www.cisco.com

Total vulnerabilities: 19

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU133307 - External Control of File Name or Path CVE-2026-20175	CWE-73	Medium	No	No	15.0(1)SU1	04.06.2026	SB2026060402
#VU110238 - Command injection CVE-2025-20278	CWE-77	Low	No	No	12.6(2)ES6, 15.0(1)	06.06.2025	SB2025060643
#VU109651 - Privilege Chaining CVE-2025-20112	CWE-268	Low	No	No	-	22.05.2025	SB2025052222
#VU91565 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-20405	CWE-79	Low	No	No	12.6(2) ES03	09.06.2024	SB2024060904
#VU91564 - Server-Side Request Forgery (SSRF) CVE-2024-20404	CWE-918	Medium	No	No	12.6(2) ES03	09.06.2024	SB2024060904
#VU72696 - Security Features CVE-2023-20088	CWE-254	Medium	No	No	12.6(1) ES7	01.03.2023	SB2023030145
#VU53397 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2021-1358	CWE-601	Medium	No	No	-	20.05.2021	SB2021052011
#VU53396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-1254	CWE-79	Low	No	No	12.6.1	20.05.2021	SB2021052010
#VU49598 - Improper Authentication CVE-2021-1246	CWE-287	Medium	No	No	12.0 ES05, 12.5 ES05	19.01.2021	SB2021011903
#VU49597 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-1245	CWE-79	Low	No	No	12.0 ES05, 12.5 ES05	13.01.2021	SB2021011903
#VU25477 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-3159	CWE-79	Low	No	No	12.5.1	20.02.2020	SB2020022007
#VU24162 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-15278	CWE-79	Low	No	No	11.6.1 ES9	09.01.2020	SB2020010913
#VU20867 - Server-Side Request Forgery (SSRF) CVE-2019-12632	CWE-918	Medium	No	No	11.6.1 ES7, 12.0.1 ES01	05.09.2019	SB2019090512
#VU13977 - Exposure of sensitive information to an unauthorized actor CVE-2018-0399	CWE-200	Low	No	No	11.5.1 ES6	23.07.2018	SB2018071807
#VU13976 - Server-Side Request Forgery (SSRF) CVE-2018-0398	CWE-918	Low	No	No	-	18.07.2018	SB2018071807
#VU9387 - Improper Authentication CVE-2017-12337	CWE-287	High	No	No	-	21.11.2017	SB2017112115 SB2017112116 SB2017112117 and 5 more
#VU7679 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-6761	CWE-79	Low	No	No	-	03.08.2017	SB2017080308
#VU6423 - Use of Hard-coded Credentials CVE-2017-6626	CWE-798	Low	No	No	-	05.05.2017	SB2017050504
#VU941 - Cross-Site Request Forgery (CSRF) CVE-2016-6442	CWE-352	Low	No	No	-	12.10.2016	SB2016101209