Most recent entries from all

cisco-sa-20170621-ucce — Cisco Unified Contact Center Express Clear Text Authentication Vulnerability

2026-10-02T21:31:23.266392+00:00

A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to masquerade as a legitimate user. The vulnerability is due to the XMPP service incorrectly processing an unsecured HTTP port for third-party, remote presence monitoring. A successful exploit could allow the attacker to access the system as another user. There are no workarounds that address this vulnerability.

cnvd-2017-13827

2026-10-02T21:31:23.266437+00:00

cnvd-2017-13827

EUVD-2026-74169

2026-10-02T21:31:23.266454+00:00

EUVD-2026-74169

fkie_cve-2017-6722

2026-10-02T21:31:23.266466+00:00

A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information: CSCuw86638. Known Affected Releases: 10.6(1). Known Fixed Releases: 11.5(1.10000.61).

GHSA-r8qw-7chv-8gcx

2026-10-02T21:31:23.266488+00:00

A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information: CSCuw86638. Known Affected Releases: 10.6(1). Known Fixed Releases: 11.5(1.10000.61).

gsd-2017-6722

2026-10-02T21:31:23.266503+00:00

gsd-2017-6722