[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgeov-1Wwffu1VsXuOWKcxLx7UYrObA_1c6o7LQ1vrn8":3,"g5a-family:cisco\u002Ffinesse":237,"g5a-ex:cisco\u002Ffinesse@*":238},{"success":4,"data":5},true,{"product":6,"versions":107,"topVulnerabilitiesByEpss":151,"kevVulnerabilities":210,"seoMetadata":215,"meta":234},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":106},"cisco","finesse",43,24,1,"2024-06-05",[14,19,21,23,26,28,30,32,34,36,38,40,42,44,46,48,50,53,55,57,59,61,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.0\\(1\\)_base",2,0,false,{"version":20,"cve_count":11,"kev_count":17,"has_kev":18},"10.0\\(1\\)_su1",{"version":22,"cve_count":11,"kev_count":17,"has_kev":18},"10.0\\(1\\)_su1.1",{"version":24,"cve_count":25,"kev_count":17,"has_kev":18},"10.5\\(1\\)_base",4,{"version":27,"cve_count":11,"kev_count":17,"has_kev":18},"10.5\\(1\\)_es1",{"version":29,"cve_count":11,"kev_count":17,"has_kev":18},"10.5\\(1\\)_es2",{"version":31,"cve_count":11,"kev_count":17,"has_kev":18},"10.5\\(1\\)_es3",{"version":33,"cve_count":11,"kev_count":17,"has_kev":18},"10.5\\(1\\)_es4",{"version":35,"cve_count":11,"kev_count":17,"has_kev":18},"10.5\\(1\\)_su1",{"version":37,"cve_count":11,"kev_count":17,"has_kev":18},"10.5\\(1\\)_su1.1",{"version":39,"cve_count":11,"kev_count":17,"has_kev":18},"10.5\\(1\\)_su1.7",{"version":41,"cve_count":11,"kev_count":17,"has_kev":18},"10.6\\(1\\)",{"version":43,"cve_count":16,"kev_count":17,"has_kev":18},"10.6\\(1\\)_base",{"version":45,"cve_count":11,"kev_count":17,"has_kev":18},"10.6\\(1\\)_su1",{"version":47,"cve_count":11,"kev_count":17,"has_kev":18},"10.6\\(1\\)_su2",{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},"11.0\\(1\\)",{"version":51,"cve_count":52,"kev_count":17,"has_kev":18},"11.0\\(1\\)_base",3,{"version":54,"cve_count":25,"kev_count":17,"has_kev":18},"11.5\\(1\\)",{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},"11.5\\(3\\)",{"version":58,"cve_count":25,"kev_count":17,"has_kev":18},"11.6\\(1\\)",{"version":60,"cve_count":25,"kev_count":17,"has_kev":18},"12.0\\(1\\)",{"version":62,"cve_count":63,"kev_count":11,"has_kev":4},"12.5\\(1\\)",5,{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},"12.5\\\\(1\\\\)",{"version":67,"cve_count":16,"kev_count":11,"has_kev":4},"12.6\\(1\\)",{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},"12.6\\\\(1\\\\)",{"version":71,"cve_count":16,"kev_count":17,"has_kev":18},"12.6\\(2\\)",{"version":73,"cve_count":11,"kev_count":17,"has_kev":18},"8.5\\(1\\)_base",{"version":75,"cve_count":11,"kev_count":17,"has_kev":18},"8.5\\(2\\)_base",{"version":77,"cve_count":11,"kev_count":17,"has_kev":18},"8.5\\(3\\)_base",{"version":79,"cve_count":11,"kev_count":17,"has_kev":18},"8.5\\(4\\)_base",{"version":81,"cve_count":11,"kev_count":17,"has_kev":18},"8.5\\(5\\)_base",{"version":83,"cve_count":11,"kev_count":17,"has_kev":18},"8.6\\(1\\)_base",{"version":85,"cve_count":11,"kev_count":17,"has_kev":18},"9.0\\(1\\)_base",{"version":87,"cve_count":11,"kev_count":17,"has_kev":18},"9.0\\(2\\)_base",{"version":89,"cve_count":11,"kev_count":17,"has_kev":18},"9.1\\(1\\)_base",{"version":91,"cve_count":11,"kev_count":17,"has_kev":18},"9.1\\(1\\)_es1",{"version":93,"cve_count":11,"kev_count":17,"has_kev":18},"9.1\\(1\\)_es2",{"version":95,"cve_count":11,"kev_count":17,"has_kev":18},"9.1\\(1\\)_es3",{"version":97,"cve_count":11,"kev_count":17,"has_kev":18},"9.1\\(1\\)_es4",{"version":99,"cve_count":11,"kev_count":17,"has_kev":18},"9.1\\(1\\)_es5",{"version":101,"cve_count":11,"kev_count":17,"has_kev":18},"9.1\\(1\\)_su1",{"version":103,"cve_count":11,"kev_count":17,"has_kev":18},"9.1\\(1\\)_su1.1",{"version":105,"cve_count":11,"kev_count":17,"has_kev":18},"9.5\\(1\\)","Finesse by Cisco is a technology product with 43 tracked versions and 24 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":11,"kev_count":17,"has_kev":18},{"version":22,"cve_count":11,"kev_count":17,"has_kev":18},{"version":24,"cve_count":25,"kev_count":17,"has_kev":18},{"version":27,"cve_count":11,"kev_count":17,"has_kev":18},{"version":29,"cve_count":11,"kev_count":17,"has_kev":18},{"version":31,"cve_count":11,"kev_count":17,"has_kev":18},{"version":33,"cve_count":11,"kev_count":17,"has_kev":18},{"version":35,"cve_count":11,"kev_count":17,"has_kev":18},{"version":37,"cve_count":11,"kev_count":17,"has_kev":18},{"version":39,"cve_count":11,"kev_count":17,"has_kev":18},{"version":41,"cve_count":11,"kev_count":17,"has_kev":18},{"version":43,"cve_count":16,"kev_count":17,"has_kev":18},{"version":45,"cve_count":11,"kev_count":17,"has_kev":18},{"version":47,"cve_count":11,"kev_count":17,"has_kev":18},{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},{"version":51,"cve_count":52,"kev_count":17,"has_kev":18},{"version":54,"cve_count":25,"kev_count":17,"has_kev":18},{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},{"version":58,"cve_count":25,"kev_count":17,"has_kev":18},{"version":60,"cve_count":25,"kev_count":17,"has_kev":18},{"version":62,"cve_count":63,"kev_count":11,"has_kev":4},{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},{"version":67,"cve_count":16,"kev_count":11,"has_kev":4},{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},{"version":71,"cve_count":16,"kev_count":17,"has_kev":18},{"version":73,"cve_count":11,"kev_count":17,"has_kev":18},{"version":75,"cve_count":11,"kev_count":17,"has_kev":18},{"version":77,"cve_count":11,"kev_count":17,"has_kev":18},{"version":79,"cve_count":11,"kev_count":17,"has_kev":18},{"version":81,"cve_count":11,"kev_count":17,"has_kev":18},{"version":83,"cve_count":11,"kev_count":17,"has_kev":18},{"version":85,"cve_count":11,"kev_count":17,"has_kev":18},{"version":87,"cve_count":11,"kev_count":17,"has_kev":18},{"version":89,"cve_count":11,"kev_count":17,"has_kev":18},{"version":91,"cve_count":11,"kev_count":17,"has_kev":18},{"version":93,"cve_count":11,"kev_count":17,"has_kev":18},{"version":95,"cve_count":11,"kev_count":17,"has_kev":18},{"version":97,"cve_count":11,"kev_count":17,"has_kev":18},{"version":99,"cve_count":11,"kev_count":17,"has_kev":18},{"version":101,"cve_count":11,"kev_count":17,"has_kev":18},{"version":103,"cve_count":11,"kev_count":17,"has_kev":18},{"version":105,"cve_count":11,"kev_count":17,"has_kev":18},[152,160,166,173,181,186,190,195,201,206],{"cveId":153,"description":154,"publishedDate":155,"cvssScore":156,"cvssVersion":157,"severity":158,"isKev":4,"epssScore":159},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10",10,"v3.1","Critical",0.99999,{"cveId":161,"description":162,"publishedDate":12,"cvssScore":163,"cvssVersion":157,"severity":164,"isKev":18,"epssScore":165},"CVE-2024-20404","A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system.\r\n\r This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent to an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to obtain limited sensitive information for services that are associated to the affected device.",7.2,"High",0.22644,{"cveId":167,"description":168,"publishedDate":169,"cvssScore":170,"cvssVersion":171,"severity":158,"isKev":18,"epssScore":172},"CVE-2017-12337","A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access to an affected device. The vulnerability occurs when a refresh upgrade (RU) or Prime Collaboration Deployment (PCD) migration is performed on an affected device. When a refresh upgrade or PCD migration is completed successfully, an engineering flag remains enabled and could allow root access to the device with a known password. If the vulnerable device is subsequently upgraded using the standard upgrade method to an Engineering Special Release, service update, or a new major release of the affected product, this vulnerability is remediated by that action. Note: Engineering Special Releases that are installed as COP files, as opposed to the standard upgrade method, do not remediate this vulnerability. An attacker who can access an affected device over SFTP while it is in a vulnerable state could gain root access to the device. This access could allow the attacker to compromise the affected system completely. Cisco Bug IDs: CSCvg22923, CSCvg55112, CSCvg55128, CSCvg55145, CSCvg58619, CSCvg64453, CSCvg64456, CSCvg64464, CSCvg64475, CSCvg68797.","2017-11-16",9.8,"v3.0",0.06435,{"cveId":174,"description":175,"publishedDate":176,"cvssScore":177,"cvssVersion":178,"severity":179,"isKev":18,"epssScore":180},"CVE-2015-4310","Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug IDs CSCuq82322, CSCut95853, and CSCuq73975.","2015-08-19",4.3,"v2","Medium",0.02162,{"cveId":182,"description":183,"publishedDate":184,"cvssScore":63,"cvssVersion":178,"severity":179,"isKev":18,"epssScore":185},"CVE-2013-3457","Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request to a directory URL, aka Bug ID CSCug16772.","2013-08-12",0.0215,{"cveId":187,"description":188,"publishedDate":184,"cvssScore":63,"cvssVersion":178,"severity":179,"isKev":18,"epssScore":189},"CVE-2013-3455","Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732.",0.02125,{"cveId":191,"description":192,"publishedDate":193,"cvssScore":170,"cvssVersion":171,"severity":158,"isKev":18,"epssScore":194},"CVE-2018-0398","Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack. Cisco Bug IDs: CSCvg71018.","2018-07-18",0.02036,{"cveId":196,"description":197,"publishedDate":198,"cvssScore":199,"cvssVersion":171,"severity":164,"isKev":18,"epssScore":200},"CVE-2017-6779","Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM&P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823.","2018-06-07",7.5,0.01984,{"cveId":202,"description":203,"publishedDate":204,"cvssScore":199,"cvssVersion":178,"severity":164,"isKev":18,"epssScore":205},"CVE-2015-0754","Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.","2015-05-29",0.0196,{"cveId":207,"description":208,"publishedDate":193,"cvssScore":170,"cvssVersion":171,"severity":158,"isKev":18,"epssScore":209},"CVE-2018-0399","Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected system. Cisco Bug IDs: CSCvg71044.",0.01864,[211],{"cveId":153,"description":154,"publishedDate":155,"cvssScore":156,"severity":158,"isKev":4,"epssScore":159,"cisaVulnName":212,"cisaDateAdded":155,"cisaShortDescription":213,"cisaRequiredAction":214},"Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"title":216,"metaDescription":217,"keywords":218,"structuredData":219},"Finesse by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Finesse by Cisco covering 43 versions with 24 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Finesse vulnerabilities, Finesse security, Finesse CVE, Cisco Finesse, Finesse threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Finesse KEV, Finesse exploited vulnerabilities",{"@context":220,"@type":221,"name":222,"description":217,"url":223,"manufacturer":224,"applicationCategory":228,"softwareVersion":229,"mainEntity":230},"https:\u002F\u002Fschema.org","SoftwareApplication","Finesse","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Ffinesse",{"@type":225,"name":226,"url":227},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","43 versions tracked",{"@type":231,"name":232,"description":233,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Finesse Security Vulnerabilities","Security vulnerabilities affecting Finesse by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":235,"apiVersion":236},"2026-10-17T19:42:34.504Z","3.0",[],{"rows":239,"total":11,"capped":18,"failed":17},[240],{"cveId":153,"name":212,"severity":158,"cvss":156,"added":155,"epss":159,"published":241,"ranges":242,"checked":4,"hits":244,"covers":18},"2021-12-10T10:15:09.143",[243],"before 12.6(1)",[]]