CVE-2016-1439

MEDIUM 6.1CVE-2016-1439 · Published 23/06/2016 · updated 17/06/2026

In short

CVE-2016-1439 is a MEDIUM (CVSS 6.1) vulnerability affecting unified contact center enterprise (cisco).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unified contact center enterprise cisco	`= 10.0(1)= 10.0(2)= 10.5(1)= 10.5(2)= 4.6(2)= 4.6.2= 5.0(0)= 6.0(0)= 7.0(0)= 7.1(2)= 7.1(3)= 7.1(4)= 7.1(5)= 7.1.0= 7.2(1)= 7.2(2)= 7.2(3)= 7.2(4)= 7.2(5)= 7.2(6)= 7.2(7)= 7.5(10)= 7.5(2)= 7.5(3)= 7.5(4)= 7.5(5)= 7.5(6)= 7.5(7)= 7.5(8)= 7.5(9)= 8.0(2)= 8.0(3)= 8.5(1)= 8.5(2)= 8.5(3)= 8.5(4)= 9.0(2)= 9.0(3)= 9.0(4)`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650.

References

More vulnerabilities in unified contact center enterprise

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unified contact center enterprise

cisco

= 10.0(1)= 10.0(2)= 10.5(1)= 10.5(2)= 4.6(2)= 4.6.2= 5.0(0)= 6.0(0)= 7.0(0)= 7.1(2)= 7.1(3)= 7.1(4)= 7.1(5)= 7.1.0= 7.2(1)= 7.2(2)= 7.2(3)= 7.2(4)= 7.2(5)= 7.2(6)= 7.2(7)= 7.5(10)= 7.5(2)= 7.5(3)= 7.5(4)= 7.5(5)= 7.5(6)= 7.5(7)= 7.5(8)= 7.5(9)= 8.0(2)= 8.0(3)= 8.5(1)= 8.5(2)= 8.5(3)= 8.5(4)= 9.0(2)= 9.0(3)= 9.0(4)

No fix yet

More vulnerabilities in unified contact center enterprise

See all →