Cisco Unified Customer Voice Portal (CVP) 11.6(1) ES-11

CPE Details

Cisco Unified Customer Voice Portal (CVP) 11.6(1) ES-11
cisco
unified_customer_voice_portal
11.6\(1\)_es-11
2020-10-13
09h46 +00:00
2020-10-13
09h46 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:cisco:unified_customer_voice_portal:11.6\(1\)_es-11:*:*:*:*:*:*:*

Informations

Vendor

cisco

Product

unified_customer_voice_portal

Version

11.6\(1\)_es-11

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-1599 2021-07-22 15h20 +00:00 A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary code in the context of the interface, access sensitive, browser-based information, or cause an affected device to reboot under certain conditions.
5.4
Medium
CVE-2019-16017 2020-09-23 00h26 +00:00 A vulnerability in the Operations, Administration, Maintenance and Provisioning (OAMP) OpsConsole Server for Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to execute Insecure Direct Object Reference actions on specific pages within the OAMP application. The vulnerability is due to insufficient input validation on specific pages of the OAMP application. An attacker could exploit this vulnerability by authenticating to Cisco Unified CVP and sending crafted HTTP requests. A successful exploit could allow an attacker with administrator or read-only privileges to learn information outside of their expected scope. An attacker with administrator privileges could modify certain configuration details of resources outside of their defined scope, which could result in a denial of service (DoS) condition.
6.8
Medium
CVE-2020-3402 2020-07-02 04h20 +00:00 A vulnerability in the Java Remote Method Invocation (RMI) interface of Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because certain RMI listeners are not properly authenticated. An attacker could exploit this vulnerability by sending a crafted request to the affected listener. A successful exploit could allow the attacker to access sensitive information on an affected device.
7.5
High
CVE-2014-3325 2014-07-19 17h00 +00:00 Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs CSCuh61711, CSCuh61720, CSCuh61723, CSCuh61726, CSCuh61727, CSCuh61731, and CSCuh61733.
4.3