ID
VAR-202105-0445
CVE
CVE-2021-1254
TITLE
Cisco Finesse Cross-site Scripting Vulnerability
Trust: 0.8
DESCRIPTION
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit these vulnerabilities by injecting malicious code into the web-based management interface and persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. An attacker needs valid administrator credentials to inject the malicious script code. Cisco Finesse Contains a cross-site scripting vulnerability.Information may be obtained and information may be tampered with. Pillow is a Python-based image processing library. There is currently no information about this vulnerability, please feel free to follow CNNVD or manufacturer announcements. Cisco Finesse is a set of call center management software developed by Cisco
Trust: 2.34
AFFECTED PRODUCTS
| vendor: | cisco | model: | finesse | scope: | lt | version: | 12.6\(1\) | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco finesse | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco finesse | scope: | eq | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-79 | Trust: 1.1 |
| problemtype: | Cross-site scripting (CWE-79) [ Other ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
other
Trust: 0.6
PATCH
| title: | cisco-sa-finesse-strd-xss-bUKqffFW | url: | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-strd-xss-bUKqffFW | Trust: 0.8 |
| title: | Cisco Finesse Fixes for cross-site scripting vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=151147 | Trust: 0.6 |
| title: | Cisco: Cisco Finesse Cross-Site Scripting Vulnerabilities | url: | https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-finesse-strd-xss-bUKqffFW | Trust: 0.1 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-1254 | Trust: 3.4 |
| db: | JVNDB | id: | JVNDB-2021-007179 | Trust: 0.8 |
| db: | CS-HELP | id: | SB2021041363 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202104-975 | Trust: 0.6 |
| db: | CS-HELP | id: | SB2021052010 | Trust: 0.6 |
| db: | AUSCERT | id: | ESB-2021.1746 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202105-1248 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-374308 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2021-1254 | Trust: 0.1 |
REFERENCES
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-finesse-strd-xss-bukqfffw | Trust: 1.9 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-1254 | Trust: 0.8 |
| url: | https://www.cybersecurity-help.cz/vdb/sb2021041363 | Trust: 0.6 |
| url: | https://vigilance.fr/vulnerability/cisco-unified-ccx-cross-site-scripting-via-finesse-35489 | Trust: 0.6 |
| url: | https://www.auscert.org.au/bulletins/esb-2021.1746 | Trust: 0.6 |
| url: | https://www.cybersecurity-help.cz/vdb/sb2021052010 | Trust: 0.6 |
| url: | https://cwe.mitre.org/data/definitions/79.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | VULHUB | id: | VHN-374308 |
| db: | VULMON | id: | CVE-2021-1254 |
| db: | JVNDB | id: | JVNDB-2021-007179 |
| db: | CNNVD | id: | CNNVD-202104-975 |
| db: | CNNVD | id: | CNNVD-202105-1248 |
| db: | NVD | id: | CVE-2021-1254 |
LAST UPDATE DATE
2024-08-14T12:43:54.112000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-374308 | date: | 2021-05-27T00:00:00 |
| db: | VULMON | id: | CVE-2021-1254 | date: | 2021-05-27T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-007179 | date: | 2022-02-03T08:31:00 |
| db: | CNNVD | id: | CNNVD-202104-975 | date: | 2021-04-14T00:00:00 |
| db: | CNNVD | id: | CNNVD-202105-1248 | date: | 2021-05-28T00:00:00 |
| db: | NVD | id: | CVE-2021-1254 | date: | 2023-11-07T03:27:48.447 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-374308 | date: | 2021-05-22T00:00:00 |
| db: | VULMON | id: | CVE-2021-1254 | date: | 2021-05-22T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-007179 | date: | 2022-02-03T00:00:00 |
| db: | CNNVD | id: | CNNVD-202104-975 | date: | 2021-04-13T00:00:00 |
| db: | CNNVD | id: | CNNVD-202105-1248 | date: | 2021-05-19T00:00:00 |
| db: | NVD | id: | CVE-2021-1254 | date: | 2021-05-22T07:15:07.017 |