Known vulnerabilities in Cisco Finesse 10.6(1) base
Vendor:
Cisco Systems, Inc
Software:
Cisco Finesse
Version:
10.6(1) base
Software CPE:
cpe:2.3:a:cisco_systems:cisco_finesse:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Vulnerabilities by Severity
15.0(1)SU1
15.0(1)
12.6(2)ES6
15.0
12.6
14.0(1)
12.6(2) ES03
12.6(1) ES7
12.6(1)
12.5 ES05
12.0 ES05
12.5(1)
11.6(1) ES9
12.0(1)
12.0(1)ES01
11.6(1)ES7
11.5(1)ES6
9.1(1)
9.0(1)
8.6(1)
10.6(1)
10.5(1)
10.0(1)
11.6(1)
11.5(1)
11.0(1)
10.5(1) su1
10.5(1) su1.1
10.6(1) su2
8.5(1) base
9.1(1) su1.1
9.0(2) base
10.6(1) su1
9.1(1) su1
10.0(1) su1
8.6(1) base
8.5(5) base
10.5(1) es1
10.5(1) es2
8.5(3) base
10.0(1) su1.1
9.1(1) es1
9.1(1) es2
8.5(4) base
9.1(1) es5
9.1(1) es3
9.1(1) es4
10.5(1) su1.7
10.5(1) es3
9.1(1) base
10.5(1) es4
8.5(2) base
9.0(1) base
11.0\(1\) base
10.5\(1\) base
11.0(1) base
10.0(1) base
10.5(1) base
10.6(1) base
-
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU24162 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-15278 |
CWE-79 | Low | 11.6.1 ES9 | 09.01.2020 |
SB2020010913 |
||
| #VU20867 - Server-Side Request Forgery (SSRF) CVE-2019-12632 |
CWE-918 | Medium | 11.6.1 ES7, 12.0.1 ES01 | 05.09.2019 |
SB2019090512 |
||
| #VU7679 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-6761 |
CWE-79 | Low | - | 03.08.2017 |
SB2017080308 |