Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability
Vulnerability Description
A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perform unauthorized actions.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Cisco Unified Contact Center Express 代码问题漏洞
Vulnerability Description
Cisco Unified Contact Center Express（Unified CCX）是美国思科（Cisco）公司的一款统一通信解决方案中的客户关系管理组件。该组件支持自助语音服务、呼叫分配和客户访问控制等功能。 Cisco Unified CCX 11.6(2)ES04之前版本和12.0(1)SU0.1.之前版本中存在代码问题漏洞，该漏洞程序没有正确验证用户提交的输入。远程攻击者可通过发送特制的请求利用该漏洞访问系统并执行未授权的操作。
CVSS Information
N/A
Vulnerability Type
N/A