Cisco Unified Contact Center Express Editor Software vulnerabilities

5 CVEs affecting Cisco Unified Contact Center Express Editor Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2180, published 2014-04-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-2102, published 2014-02-27. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining…
CVE-2014-0746, published 2014-02-27. Medium severity, CVSS 4.0. EPSS: 1.3% chance of exploitation in the next 30 days. The disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML…
CVE-2013-1214, published 2013-04-24. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by…
CVE-2014-0745, published 2014-02-27. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express (Unified CCX) allows remote attackers to hijack the authentication of…
CVE-2014-2180, published 2014-04-29. Medium severity, CVSS 4.0. EPSS: 0.8% chance of exploitation in the next 30 days. The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a…