Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-1246

Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerability in the web management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP could allow an unauthenticated, remote attacker to access the OpenSocial Gadget Editor without providing valid user credentials. The vulnerability is due to missing authentication for a specific section of the web-based management interface. An attacker could exploit this vulnerability by accessing a crafted URL. A successful exploit could allow the attacker to obtain access to a section of the interface, which they could use to obtain potentially confidential information and create arbitrary XML files. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.3
Products affected by CVE-2021-1246
  • Cisco » Finesse » Version: N/A
    cpe:2.3:a:cisco:finesse:-
  • Cisco » Finesse » Version: 10.0(1)_base
    cpe:2.3:a:cisco:finesse:10.0(1)_base
  • Cisco » Finesse » Version: 10.0(1)_su1
    cpe:2.3:a:cisco:finesse:10.0(1)_su1
  • Cisco » Finesse » Version: 10.0(1)_su1.1
    cpe:2.3:a:cisco:finesse:10.0(1)_su1.1
  • Cisco » Finesse » Version: 10.5(1)_base
    cpe:2.3:a:cisco:finesse:10.5(1)_base
  • Cisco » Finesse » Version: 10.5(1)_es1
    cpe:2.3:a:cisco:finesse:10.5(1)_es1
  • Cisco » Finesse » Version: 10.5(1)_es2
    cpe:2.3:a:cisco:finesse:10.5(1)_es2
  • Cisco » Finesse » Version: 10.5(1)_es3
    cpe:2.3:a:cisco:finesse:10.5(1)_es3
  • Cisco » Finesse » Version: 10.5(1)_es4
    cpe:2.3:a:cisco:finesse:10.5(1)_es4
  • Cisco » Finesse » Version: 10.5(1)_su1
    cpe:2.3:a:cisco:finesse:10.5(1)_su1
  • Cisco » Finesse » Version: 10.5(1)_su1.1
    cpe:2.3:a:cisco:finesse:10.5(1)_su1.1
  • Cisco » Finesse » Version: 10.5(1)_su1.7
    cpe:2.3:a:cisco:finesse:10.5(1)_su1.7
  • Cisco » Finesse » Version: 10.6(1)_base
    cpe:2.3:a:cisco:finesse:10.6(1)_base
  • Cisco » Finesse » Version: 10.6(1)_su1
    cpe:2.3:a:cisco:finesse:10.6(1)_su1
  • Cisco » Finesse » Version: 10.6(1)_su2
    cpe:2.3:a:cisco:finesse:10.6(1)_su2
  • Cisco » Finesse » Version: 11.0(1)
    cpe:2.3:a:cisco:finesse:11.0(1)
  • Cisco » Finesse » Version: 11.0(1)_base
    cpe:2.3:a:cisco:finesse:11.0(1)_base
  • Cisco » Finesse » Version: 11.5(1)
    cpe:2.3:a:cisco:finesse:11.5(1)
  • Cisco » Finesse » Version: 11.5(3)
    cpe:2.3:a:cisco:finesse:11.5(3)
  • Cisco » Finesse » Version: 11.6(1)
    cpe:2.3:a:cisco:finesse:11.6(1)
  • Cisco » Finesse » Version: 12.0(1)
    cpe:2.3:a:cisco:finesse:12.0(1)
  • Cisco » Finesse » Version: 12.5(1)
    cpe:2.3:a:cisco:finesse:12.5(1)
  • Cisco » Finesse » Version: 8.5(1)_base
    cpe:2.3:a:cisco:finesse:8.5(1)_base
  • Cisco » Finesse » Version: 8.5(2)_base
    cpe:2.3:a:cisco:finesse:8.5(2)_base
  • Cisco » Finesse » Version: 8.5(3)_base
    cpe:2.3:a:cisco:finesse:8.5(3)_base
  • Cisco » Finesse » Version: 8.5(4)_base
    cpe:2.3:a:cisco:finesse:8.5(4)_base
  • Cisco » Finesse » Version: 8.5(5)_base
    cpe:2.3:a:cisco:finesse:8.5(5)_base
  • Cisco » Finesse » Version: 8.6(1)_base
    cpe:2.3:a:cisco:finesse:8.6(1)_base
  • Cisco » Finesse » Version: 9.0(1)_base
    cpe:2.3:a:cisco:finesse:9.0(1)_base
  • Cisco » Finesse » Version: 9.0(2)_base
    cpe:2.3:a:cisco:finesse:9.0(2)_base
  • Cisco » Finesse » Version: 9.1(1)_base
    cpe:2.3:a:cisco:finesse:9.1(1)_base
  • Cisco » Finesse » Version: 9.1(1)_es1
    cpe:2.3:a:cisco:finesse:9.1(1)_es1
  • Cisco » Finesse » Version: 9.1(1)_es2
    cpe:2.3:a:cisco:finesse:9.1(1)_es2
  • Cisco » Finesse » Version: 9.1(1)_es3
    cpe:2.3:a:cisco:finesse:9.1(1)_es3
  • Cisco » Finesse » Version: 9.1(1)_es4
    cpe:2.3:a:cisco:finesse:9.1(1)_es4
  • Cisco » Finesse » Version: 9.1(1)_es5
    cpe:2.3:a:cisco:finesse:9.1(1)_es5
  • Cisco » Finesse » Version: 9.1(1)_su1
    cpe:2.3:a:cisco:finesse:9.1(1)_su1
  • Cisco » Finesse » Version: 9.1(1)_su1.1
    cpe:2.3:a:cisco:finesse:9.1(1)_su1.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved