nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-12632 CVE-2019-12632
HIGH
Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability
Record summary
CVE-2019-12632 has a selected CVSS score of 7.5 (high).
Description
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 19, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Cisco FinesseBrowse Cisco / Cisco Finesse | CVE List | Before 12.0(1)ES01 | affected |
References
220190904 Cisco Finesse Request Processing Server-Side Request Forgery VulnerabilityVendor advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-finesse-ssrf