CVE-2018-0400

2018-07-1823:00:00

CWE-79

cisco

www.cve.org

0.001 Low

EPSS

Percentile

44.0%

JSON

Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70904.

CNA Affected

[
  {
    "product": "Cisco Unified Contact Center Express unknown",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Unified Contact Center Express unknown"
      }
    ]
  }
]