Product by Cisco
Cisco Finesse for Cisco Unified Contact Center Enterprise
16 known vulnerabilities in Cisco Finesse for Cisco Unified Contact Center Enterprise (Cisco), 2 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
2
Actively exploited (KEV)
1
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 75 other products | 10.0 | |
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 160 other products | 7.5 | |
| Critical | CVE-2025-20242 | Cisco Unified Contact Center Enterprise 11.6(2): Improper Access Control | 6.5 | |
| High | CVE-2026-20362 | Cisco Finesse Server-Side Request Forgery Vulnerability | 7.2 | |
| Medium | CVE-2017-6626 | Cisco Finesse for Cisco Unified Contact Center Enterprise: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2020-3163 | Cisco Unified Contact Center Enterprise Denial of Service Vulnerability | 6.8 | |
| Medium | CVE-2026-20314 | Cisco Packaged Contact Center Enterprise: Server-Side Request Forgery (SSRF) | 5.0 | |
| Medium | CVE-2023-20061 | Cisco Unified Intelligence Center Vulnerabilities | 6.5 | |
| Not rated | CVE-2014-3323 | Cisco Unified Contact Center Enterprise 11.6(2): Path Traversal | — | |
| Medium | CVE-2016-1439 | Cisco Unified Contact Center Enterprise 11.6(2): Cross-Site Scripting (XSS) | 6.1 | |
| Not rated | CVE-2007-5539 | Cisco Unified Contact Center Enterprise 11.6(2): Privilege Escalation | — | |
| Medium | CVE-2023-20062 | Cisco Unified Intelligence Center Vulnerabilities | 6.5 | |
| Medium | CVE-2021-1395 | Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability | 4.7 | |
| Not rated | CVE-2007-0198 | Cisco IP Contact Center Enterprise: Denial of Service | — | |
| Medium | CVE-2023-20058 | Cisco Unified Intelligence Center: Cross-site Scripting | 6.1 | |
| Not rated | CVE-2014-2180 | Cisco Unified Contact Center Enterprise 11.6(2): security vulnerability | — |
News
- Cisco Finesse Server-Side Request Forgery Vulnerabilitycisco-psirt,
- There's only so much code: the rise in vulnerability numberscisco-talos,
- SSA-714170 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000siemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert
- Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerabilitycisco-psirt