CVE-2015-0714: Cisco Finesse

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595.

Affected products

• Cisco Finesse: version 10.0(1)_base only; version 10.5(1)_base only; version 10.6(1)_base only; version 11.0(1)_base only

Published 2015-05-02. Last modified 2026-06-17.