Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Unified Intelligence Center API Information Disclosure Vulnerability
Vulnerability Description
A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system. This vulnerability is due to improper validation of requests to certain API endpoints. An attacker could exploit this vulnerability by sending a valid request to a specific API endpoint within the affected system. A successful exploit could allow a low-privileged user to view sensitive information on the affected system that should be restricted. To exploit this vulnerability, the attacker must have valid user credentials on the affected system.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
信息暴露
Vulnerability Title
Cisco多款产品 信息泄露漏洞
Vulnerability Description
Cisco Unified Intelligence Center等都是美国思科（Cisco）公司的产品。Cisco Unified Intelligence Center是一套基于Web的报表平台。Cisco Unified Contact Center Express（Unified CCX）是一款统一通信解决方案中的客户关系管理组件。Cisco Unified Contact Center Enterprise是一个统一联络中心。 Cisco多款产品存在信息泄露漏洞，该漏洞源于对某些API端点请求验
CVSS Information
N/A
Vulnerability Type
N/A