Cisco Finesse 12.5(1)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:finesse:12.5\(1\):*:*:*:*:*:*:*

part: a version: 12.5(1) update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductFinesse (3c90f351-156e-57e4-9ad1-ba77fb625f4e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15278 vulnerable 2026-06-08 05:12:57.137119 Cisco Finesse Cross-Site Scripting Vulnerability
MEDIUM (6.1)
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it handles requests. An attacker could exploit this vulnerability by submitting a crafted URL. A successful exploit could allow the attacker to gain unauthorized access to sensitive information.
Published: 2020-01-26T04:50:14.717Z
Updated: 2024-11-15T17:43:47.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12632 vulnerable 2026-06-08 05:12:39.507214 Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability
MEDIUM (5.3)
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions.
Published: 2019-09-05T01:15:16.226Z
Updated: 2024-11-19T18:57:28.338Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.