Product by Cisco

    Cisco Finesse

    27 known vulnerabilities in Cisco Finesse (Cisco), 1 of them actively exploited (CISA KEV).

    Key figures

    27

    Vulnerabilities

    1

    Actively exploited (KEV)

    1

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cisco Finesse (Cisco)
    CriticalCVE-2021-44228

    Apache Log4j2 Remote Code Execution Vulnerability

    In CISA KEVRansomwarealso in 74 other products

    		10.0
    CriticalCVE-2017-12337

    Cisco Voice Operating System: Improper Authentication

    also in 10 other products

    		9.8
    HighCVE-2024-20404

    Cisco Finesse: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		7.2
    CriticalCVE-2018-0398

    Cisco Finesse: Permissions, Privileges, and Access Controls

    		9.8
    CriticalCVE-2018-0399

    Cisco Finesse: Permissions, Privileges, and Access Controls

    		9.8
    HighCVE-2017-6779

    Multiple Cisco Products: Resource Management Errors

    also in 12 other products

    		7.5
    HighCVE-2026-20362

    Cisco Finesse Server-Side Request Forgery Vulnerability

    also in 2 other products

    		7.2
    HighCVE-2016-1373

    Cisco Finesse 12.0(1) ES2: Server-Side Request Forgery (SSRF)

    		8.6
    MediumCVE-2021-1246

    Cisco Finesse OpenSocial Gadget Editor Unauthenticated Access Vulnerability

    		6.5
    MediumCVE-2021-1245

    Cisco Finesse OpenSocial Gadget Editor Cross-Site Scripting Vulnerability

    		6.5
    HighCVE-2016-6442

    Cisco Finesse 11.0(1): Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2019-12632

    Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability

    also in 1 other product

    		5.3
    MediumCVE-2017-6761

    Cisco Finesse: Cross-site Scripting

    		6.1
    MediumCVE-2017-12288

    Cisco Unified Contact Center Express: Cross-site Scripting

    		6.1
    MediumCVE-2019-15278

    Cisco Finesse Cross-Site Scripting Vulnerability

    also in 1 other product

    		6.1
    MediumCVE-2020-3159

    Cisco Finesse Web-Based Management Interface Cross-Site Scripting Vulnerability

    		6.1
    HighCVE-2023-20088

    Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability

    		5.3
    Not ratedCVE-2015-4310

    Cisco Finesse 12.0(1) ES2: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2013-3457

    Cisco Finesse 12.0(1) ES2: Path Traversal

    		—
    Not ratedCVE-2013-3455

    Cisco Finesse 12.0(1) ES2: Information Disclosure

    		—
    Not ratedCVE-2015-0754

    Cisco Finesse 12.0(1) ES2: Information Disclosure

    		—
    MediumCVE-2024-20405

    Cisco Finesse: Improper Input Validation

    also in 1 other product

    		4.8
    MediumCVE-2026-20175

    Cisco Finesse File Inclusion Vulnerability

    also in 1 other product

    		6.1
    MediumCVE-2021-1358

    Cisco Finesse Open Redirect Vulnerability

    		4.7
    MediumCVE-2021-1254

    Cisco Finesse Cross-Site Scripting Vulnerabilities

    		4.8

    All vulnerabilities in search

    News

    All products by Cisco