Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior

Críticas / altas1367▲ 28 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-1888	Modificada	Alta (7.2)	3.4%	—	Cisco Unified Contact Center Express Cisco Unified IP Interactive Voice Response	23/9/2020	17/6/2026	A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to upload arbitrary files and execute commands on the underlying operating system. To exploit this vulnerability, an attacker needs valid Administrator credentials.…
CVE-2018-0403	Modificada	Crítica (9.8)	2.6%	—	Cisco Unified Contact Center Express Cisco Unified IP Interactive Voice Response	18/7/2018	17/6/2026	Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to retrieve a cleartext password. Cisco Bug IDs: CSCvg71040.
CVE-2018-0402	Modificada	Alta (8.8)	1.0%	—	Cisco Unified Contact Center Express Cisco Unified IP Interactive Voice Response	18/7/2018	17/6/2026	Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. Cisco Bug IDs: CSCvg70921.
CVE-2018-0401	Modificada	Media (6.1)	1.2%	—	Cisco Unified Contact Center Express Cisco Unified IP Interactive Voice Response	18/7/2018	17/6/2026	Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70967.
CVE-2018-0400	Modificada	Media (6.1)	1.3%	—	Cisco Unified Contact Center Express Cisco Unified IP Interactive Voice Response	18/7/2018	17/6/2026	Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70904.
CVE-2011-3315	Modificada	Alta (7.8)	26%	—	Cisco Unified IP Interactive Voice Response Cisco Unified IP IVR Cisco Unified Communications Manager	27/10/2011	16/6/2026	Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x)…
CVE-2010-1571	Modificada	Alta (7.8)	2.9%	—	Cisco Unified Contact Center Express Cisco Customer Response Solution Cisco Unified IP Interactive Voice Response	10/6/2010	16/6/2026	Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.
CVE-2010-1570	Modificada	Alta (7.8)	2.5%	—	Cisco Unified Contact Center Express Cisco Customer Response Solution Cisco Unified IP Interactive Voice Response	10/6/2010	16/6/2026	The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message.