CVE-2026-20175
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Summary
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks.
This vulnerability is due to insufficient validation of user-supplied input for HTTP requests that are sent to an affected device. An attacker who has knowledge of the address of the affected device could exploit this vulnerability by persuading a user to click a crafted link that contains the affected device address. A successful exploit could allow the attacker to conduct browser-based attacks and execute arbitrary script code in the context of the affected interface or access sensitive information on the affected device.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Finesse | 11.0(1)ES_Rollback | affected |
| Cisco | Cisco Finesse | 10.5(1)ES4 | affected |
| Cisco | Cisco Finesse | 11.6(1)ES3 | affected |
| Cisco | Cisco Finesse | 11.0(1)ES2 | affected |
| Cisco | Cisco Finesse | 12.0(1)ES2 | affected |
| Cisco | Cisco Finesse | 10.5(1)ES3 | affected |
| Cisco | Cisco Finesse | 11.0(1) | affected |
| Cisco | Cisco Finesse | 11.6(1)FIPS | affected |
| Cisco | Cisco Finesse | 11.6(1)ES4 | affected |
| Cisco | Cisco Finesse | 11.0(1)ES3 | affected |
| Cisco | Cisco Finesse | 10.5(1)ES6 | affected |
| Cisco | Cisco Finesse | 11.0(1)ES7 | affected |
| Cisco | Cisco Finesse | 11.5(1)ES4 | affected |
| Cisco | Cisco Finesse | 10.5(1)ES8 | affected |
| Cisco | Cisco Finesse | 11.5(1) | affected |
| Cisco | Cisco Finesse | 11.6(1) | affected |
| Cisco | Cisco Finesse | 10.5(1)ES10 | affected |
| Cisco | Cisco Finesse | 11.6(1)ES2 | affected |
| Cisco | Cisco Finesse | 11.6(1)ES | affected |
| Cisco | Cisco Finesse | 11.0(1)ES6 | affected |
| Cisco | Cisco Finesse | 11.0(1)ES4 | affected |
| Cisco | Cisco Finesse | 12.0(1) | affected |
| Cisco | Cisco Finesse | 11.6(1)ES7 | affected |
| Cisco | Cisco Finesse | 10.5(1)ES7 | affected |
| Cisco | Cisco Finesse | 11.6(1)ES8 | affected |
| Cisco | Cisco Finesse | 11.5(1)ES1 | affected |
| Cisco | Cisco Finesse | 11.6(1)ES1 | affected |
| Cisco | Cisco Finesse | 11.5(1)ES5 | affected |
| Cisco | Cisco Finesse | 11.0(1)ES1 | affected |
| Cisco | Cisco Finesse | 10.5(1) | affected |
| Cisco | Cisco Finesse | 11.6(1)ES6 | affected |
| Cisco | Cisco Finesse | 10.5(1)ES2 | affected |
| Cisco | Cisco Finesse | 12.0(1)ES1 | affected |
| Cisco | Cisco Finesse | 11.0(1)ES5 | affected |
| Cisco | Cisco Finesse | 10.5(1)ES5 | affected |
| Cisco | Cisco Finesse | 11.5(1)ES3 | affected |
| Cisco | Cisco Finesse | 11.5(1)ES2 | affected |
| Cisco | Cisco Finesse | 10.5(1)ES9 | affected |
| Cisco | Cisco Finesse | 11.6(1)ES5 | affected |
| Cisco | Cisco Finesse | 11.6(1)ES9 | affected |
| Cisco | Cisco Finesse | 11.5(1)ES6 | affected |
| Cisco | Cisco Finesse | 10.5(1)ES1 | affected |
| Cisco | Cisco Finesse | 12.5(1) | affected |
| Cisco | Cisco Finesse | 12.0(1)ES3 | affected |
| Cisco | Cisco Finesse | 11.6(1)ES10 | affected |
| Cisco | Cisco Finesse | 12.5(1)ES1 | affected |
| Cisco | Cisco Finesse | 12.5(1)ES2 | affected |
| Cisco | Cisco Finesse | 12.0(1)ES4 | affected |
| Cisco | Cisco Finesse | 12.5(1)ES3 | affected |
| Cisco | Cisco Finesse | 12.0(1)ES5 | affected |
| Cisco | Cisco Finesse | 12.5(1)ES4 | affected |
| Cisco | Cisco Finesse | 12.0(1)ES6 | affected |
| Cisco | Cisco Finesse | 12.5(1)ES5 | affected |
| Cisco | Cisco Finesse | 12.5(1)ES6 | affected |
| Cisco | Cisco Finesse | 12.0(1)ES7 | affected |
| Cisco | Cisco Finesse | 12.6(1) | affected |
| Cisco | Cisco Finesse | 12.5(1)ES7 | affected |
| Cisco | Cisco Finesse | 11.6(1)ES11 | affected |
| Cisco | Cisco Finesse | 12.6(1)ES1 | affected |
| Cisco | Cisco Finesse | 12.0(1)ES8 | affected |
| Cisco | Cisco Finesse | 12.5(1)ES8 | affected |
| Cisco | Cisco Finesse | 12.6(1)ES2 | affected |
| Cisco | Cisco Finesse | 12.6(1)ES3 | affected |
| Cisco | Cisco Finesse | 12.6(1)ES4 | affected |
| Cisco | Cisco Finesse | 12.6(1)ES5 | affected |
| Cisco | Cisco Finesse | 12.5(2) | affected |
| Cisco | Cisco Finesse | 12.5(1)_SU | affected |
| Cisco | Cisco Finesse | 12.5(1)SU | affected |
| Cisco | Cisco Finesse | 12.6(1)ES6 | affected |
| Cisco | Cisco Finesse | 12.5(1)SU ES1 | affected |
| Cisco | Cisco Finesse | 12.6(1)ES7 | affected |
| Cisco | Cisco Finesse | 12.6(1)ES7_ET | affected |
| Cisco | Cisco Finesse | 12.6(2) | affected |
| Cisco | Cisco Finesse | 12.6(1)ES8 | affected |
| Cisco | Cisco Finesse | 12.6(1)ES9 | affected |
| Cisco | Cisco Finesse | 12.6(2)ES1 | affected |
| Cisco | Cisco Finesse | 12.6(1)ES10 | affected |
| Cisco | Cisco Finesse | 12.5(1)SU ES2 | affected |
| Cisco | Cisco Finesse | 12.6(1)ES11 | affected |
| Cisco | Cisco Finesse | 12.6(2)ES2 | affected |
| Cisco | Cisco Finesse | 12.6(2)ES3 | affected |
| Cisco | Cisco Finesse | 12.5(1)SU ES3 | affected |
| Cisco | Cisco Finesse | 12.6(2)ES4 | affected |
| Cisco | Cisco Finesse | 12.6(2)ES5 | affected |
| Cisco | Cisco Finesse | 15.0(1) | affected |
| Cisco | Cisco Finesse | 12.6(2)ES6 | affected |
| Cisco | Cisco Finesse | 15.0(1)ES202508 | affected |
| Cisco | Cisco Finesse | 15.0(1)ES202511 | affected |
| Cisco | Cisco Finesse | 15.0(1)ES202602 | affected |
| Cisco | Cisco Finesse | 15.0(1)SU1 | affected |
| Cisco | Cisco Finesse | 12.6(2)ES7 | affected |
Weaknesses
- CWE-73: External Control of File Name or Path
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.