← back
CVE-2019-12632

Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability

CVSS 5.3 MEDIUMEPSS 1.6%CWE-20
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.3EPSS 1.6%KEV nãoPoC Nuclei Metasploit Patch referenciado
Lifecycle
05 Sep 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Cisco · Cisco Finesse

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →