CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0CVE-2024-20540 – Cisco Unified Contact Center Management Portal Stored Cross-Site Scripting Vulnerability
https://notcve.org/view.php?id=CVE-2024-20540
06 Nov 2024 — A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into a specific page of the interface. A successfu... • https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ccmp-sxss-qBTDBZDD • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-20512 – Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability
https://notcve.org/view.php?id=CVE-2024-20512
16 Oct 2024 — A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could all... • https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ccmpdm-rxss-tAX76U3k • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •