← nejvýznamnější zprávy · všechny zprávy

EPSS 0.00

Cisco Finesse Remote File Inclusion Vulnerability

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks. This vulnerability is due to insufficient validation of user-supplied input for HTTP requests that are sent to an affected device. An attacker who has knowledge of the address of the affected device could exploit this vulnerability by persuading a user to click a crafted link…

Číst originál na Cisco PSIRT →

CZ · EN/orig

Cisco US

CVE v události 1

CVEhodnoceníKEVEPSS
CVE-2026-20175 6.1 3.1 · cisco – 0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.