CVE-2023-20061
Published Mar 3, 2023
Last updated a year ago
Overview
- Description
- Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to release software updates that address these vulnerabilities.
- Source
- ykramarz@cisco.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 6.5
- Impact score
- 3.6
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:packaged_contact_center_enterprise:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3CDF903-2720-421E-BEE0-77422403956D"
},
{
"criteria": "cpe:2.3:a:cisco:unified_contact_center_enterprise:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D31CC0E9-8E21-436B-AB84-EA1B1BC60DCD"
},
{
"criteria": "cpe:2.3:a:cisco:unified_contact_center_express:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "444F1581-0CD5-40B9-8C9E-0E428E6D75C1"
},
{
"criteria": "cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5B7ABD3-A909-432D-87D3-9C52496DEFAE",
"versionEndExcluding": "12.6\\(2\\)"
}
],
"operator": "OR"
}
]
}
]