Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack. Cisco Bug IDs: CSCvg71018.
CVSS Information
N/A
Vulnerability Type
权限、特权和访问控制
Vulnerability Title
Cisco Finesse 安全漏洞
Vulnerability Description
Cisco Finesse是美国思科（Cisco）公司的一套呼叫中心管理软件。该软件可提升呼叫中心服务质量、改善客户体验、提高客服代表满意度。 Cisco Finesse中的基于Web的管理页面存在服务器端请求伪造漏洞，该漏洞源于程序没有对Cisco Finesse API执行充分的访问控制。远程攻击者可通过向Cisco Finesse服务器提交特制的HTTP请求利用该漏洞向任意主机提交HTTP请求。
CVSS Information
N/A
Vulnerability Type
N/A