Cisco Unified Ip Interactive Voice Response vulnerabilities

CVE-2019-1888 [HIGH] CWE-434 CVE-2019-1888: A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to upload arbitrary files and execute commands on the underlying operating system. To exploit this vulnerability, an attacker needs valid Administrator credentials. The vulnerability is due to insufficie

CVE-2018-0403 [CRITICAL] CWE-79 CVE-2018-0403: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Expre Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to retrieve a cleartext password. Cisco Bug IDs: CSCvg71040.

CVE-2018-0402 [HIGH] CWE-79 CVE-2018-0402: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Expre Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. Cisco Bug IDs: CSCvg70921.

CVE-2018-0401 [MEDIUM] CWE-79 CVE-2018-0401: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Expre Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70967.

CVE-2018-0400 [MEDIUM] CWE-79 CVE-2018-0400: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Expre Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70904.

CVE-2010-1571 [HIGH] CWE-22 CVE-2010-1571: Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express ( Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.

CVE-2010-1570 [HIGH] CVE-2010-1570: The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (U The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message.