CVE-2019-12633
High
Description
A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perform unauthorized actions.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Cisco Unified Contact Center Express
PublishedSep 5, 2019
First seenSep 5, 2019
Weakness typeCWE-20Improper input validation
How to fix
Update
- cisco unified_contact_center_express11.6\(2\)es04 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified_contact_center_express | v < 11.6\(2\)es04, 12.0\(1\) | 11.6\(2\)es04 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.