CVE-2018-0402 - Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack

Back Back to CVE browser

HIGH

Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack

Published Jul 18, 2018

8.8

HIGH

CVSS 3.0

EPSS 1.01%

Description

Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. Cisco Bug IDs: CSCvg70921.

Affected products

Vendor n/a Product Cisco Unified Contact Center Express unknown Default
n/a
- Version
  Cisco Unified Contact Center Express unknown
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Cisco Unified Contact Center Express unknown

n/a

Version	Status	Constraints
Cisco Unified Contact Center Express unknown	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-352

CSRF

CWE-79

Cross-site Scripting (XSS)

References (3)

http://www.securitytracker.com/id/1041352
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1225
Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-uccx
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securitytracker.com/id/1041352		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1225		Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-uccx		x_refsource_CONFIRMVendor Advisory