CVE-2019-12633 — Improper Input Validation in Cisco Unified Contact Center Express

CWE-20 — Improper Input ValidationCWE-918 — Server-Side Request Forgery4 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 33.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Unified Contact Center ExpressCisco Unified Contact Center Express
Timeline
PublishedSep 5
Latest updateMay 24

Description

A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perfor…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5cisco/cisco_unified_contact_center_expressunspecified — 12.0(1)SU0.1

🔴Vulnerability Details

2
GHSA
GHSA-6m2f-gr3g-wqw2: A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and co↗2022-05-24
▶
CVEList
Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability↗2019-09-05
▶

📋Vendor Advisories

1
Cisco
Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability↗2019-09-04
▶
CVE-2019-12633 — Improper Input Validation in Cisco | cvebase