Unified Contact Center Express vulnerabilities
10 known vulnerabilities in Unified Contact Center Express from Cisco. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Cisco Unified Contact Center Express: Unrestricted Upload of File with Dangerous Type
A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is due to an insufficient input validation associated to file upload mechanisms. An attacker could exploi
- 7.2 High severity
Cisco Unified Contact Center Express: Unrestricted Upload of File with Dangerous Type
A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is due to an insufficient input validation associated to specific UI features. An attacker could exploit
- 9.8 Critical severity
Cisco Unified Contact Center Express: Missing Authentication for Critical Functionality
A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution. This vulnera
- 9.8 Critical severity
Cisco Unified Contact Center Express: Unrestricted Upload of File with Dangerous Type
A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is
- 8.8 High severity
Cisco Unified Contact Center Express: Unrestricted Upload of File with Dangerous Type
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to improper validation of files that are uploade
- 7.2 High severity
Cisco Unified Contact Center Express: Deserialization of Untrusted Data
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.&nb
- 7.8 High severity
Cisco Unified Contact Center Express: Deserialization of Untrusted Data
A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Jav
- 7.1 High severity
Cisco Unified Contact Center Express: Client-Side Enforcement of Server-Side Security
A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of
- 10.0 Critical severity
Cisco Unified Contact Center Enterprise: Deserialization of Untrusted Data
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provide
- 9.6 Critical severity
Cisco Unified Contact Center Domain Manager: Incorrect Resource Transfer Between Spheres
A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) and Cisco Unified Contact Center Domain Manager (Unified CCDM) could allow an authenticated, remote attacker to elevate their privileges to A