Record summary

CVE-2019-12632 has a selected CVSS score of 7.5 (high).

Description

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 19, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion rangeStatus
CVE ListBefore 12.0(1)ES01affected

References

2