CSRF in Cisco Unified Contact Center Express Editor Software
CVE-2014-0745
Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express (Unified CCX) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.008 (54.8th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_contact_center_express_editor_software
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)