Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-93334
HistoryAug 18, 2023 - 12:00 a.m.

Cisco Unified Contact Center Express Input Validation Error Vulnerability (CNVD-2023-93334)

2023-08-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
cisco
contact center express
input validation error
http requests
web cache poisoning
vulnerability

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

36.2%

Cisco Unified Contact Center Express (Unified CCX) is a customer relationship management component of a unified communications solution from Cisco. The component supports features such as self-service voice, call distribution, and customer access control. An input validation error vulnerability exists in Cisco Unified Contact Center Express, which arises from improper input validation of HTTP requests and can be exploited by an unauthenticated, remote attacker to launch a Web cache poisoning attack on an affected device.

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

36.2%

Related for CNVD-2023-93334