CVE-2016-1439: Cisco Unified Contact Center Enterprise

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650.

Affected products

• Cisco Unified Contact Center Enterprise: version 4.6(2) only; version 4.6.2 only; version 5.0(0) only; version 6.0(0) only; version 7.0(0) only; version 7.1(2) only; …

Published 2016-06-23. Last modified 2026-06-17.