CVE-2018-0398: Cisco Finesse

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack. Cisco Bug IDs: CSCvg71018.

Affected products

• Cisco Finesse: version 11.5(1) only

Published 2018-07-18. Last modified 2026-06-17.