https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 08:26:05 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-00288 bdu:2021-00288 https://cve.radiocsirt.org/vuln/bdu:2021-00288 https://cve.radiocsirt.org/vuln/cisco-sa-multi-vuln-finesse-qp6gbuo2 <p>Multiple vulnerabilities in the web-based management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack and obtain potentially confidential information by leveraging a flaw in the authentication mechanism. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in the web-based management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack and obtain potentially confidential information by leveraging a flaw in the authentication mechanism. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-multi-vuln-finesse-qp6gbuo2 https://cve.radiocsirt.org/vuln/cnvd-2021-41165 cnvd-2021-41165 https://cve.radiocsirt.org/vuln/cnvd-2021-41165 https://cve.radiocsirt.org/vuln/euvd-2026-164777 EUVD-2026-164777 https://cve.radiocsirt.org/vuln/euvd-2026-164777 https://cve.radiocsirt.org/vuln/fkie_cve-2021-1245 <p>Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in the web-based management interface of Cisco Finesse and Cisco Unified CVP could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. Cisco&amp;nbsp;has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in the web-based management interface of Cisco Finesse and Cisco Unified CVP could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. Cisco&amp;nbsp;has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-1245 https://cve.radiocsirt.org/vuln/ghsa-w3hx-r23m-8mfg <p>Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack and obtain potentially confidential information by leveraging a flaw in the authentication mechanism. For more information about these vulnerabilities, see the Details section of this advisory.</p> <p>Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack and obtain potentially confidential information by leveraging a flaw in the authentication mechanism. For more information about these vulnerabilities, see the Details section of this advisory.</p> https://cve.radiocsirt.org/vuln/ghsa-w3hx-r23m-8mfg https://cve.radiocsirt.org/vuln/gsd-2021-1245 gsd-2021-1245 https://cve.radiocsirt.org/vuln/gsd-2021-1245