CVE-2019-12633CWE-20

Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability

Medium · published September 5, 2019

CVSS v3.0
5.3
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perform unauthorized actions.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01515 · 74.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2019-09-05T01:15Z
EPSS history
Timeline
  • 05 SEP 01:15Z
    Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability
    cvelistv5