| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| unified contact center express | = 10.0(1)su1= 10.0(1)su1es04= 10.5(1)= 10.5(1)su1= 10.5(1)su1es10= 10.6(1)= 10.6(1)su1= 10.6(1)su2= 10.6(1)su2es04= 10.6(1)su3= 10.6(1)su3es01= 10.6(1)su3es02= 10.6(1)su3es03= 11.0(1)su1= 11.0(1)su1es02= 11.0(1)su1es03= 11.5(1)es01= 11.5(1)su1= 11.5(1)su1es01= 11.5(1)su1es02= 11.5(1)su1es03= 11.6(1)= 11.6(1)es01= 11.6(1)es02= 11.6(2)= 11.6(2)es01= 11.6(2)es02= 11.6(2)es03= 11.6(2)es04= 11.6(2)es05= 11.6(2)es06= 11.6(2)es07= 11.6(2)es08= 12.0(1)= 12.0(1)es01= 12.0(1)es02= 12.0(1)es03= 12.0(1)es04= 12.5(1)= 12.5(1)_su01_es01= 12.5(1)_su01_es02= 12.5(1)_su01_es03= 12.5(1)_su02_es01= 12.5(1)_su02_es02= 12.5(1)_su02_es03= 12.5(1)_su02_es04= 12.5(1)_su03_es01= 12.5(1)_su03_es02= 12.5(1)_su03_es03= 12.5(1)_su03_es04= 12.5(1)_su03_es05= 12.5(1)_su03_es06= 12.5(1)es01= 12.5(1)es02= 12.5(1)es03= 12.5(1)su1= 12.5(1)su2= 12.5(1)su3= 8.5(1)= 9.0(2)su3es04 | |
| unified intelligence center | = 10.5(1)= 11.0(1)= 11.0(2)= 11.0(3)= 11.5(1)= 11.6(1)= 12.0(1)= 12.5(1)= 12.5(1)su= 12.6(1)= 12.6(1)_es05_et= 12.6(1)_et= 12.6(2) |
A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker could exploit this vulnerability by submitting crafted API requests to an affected system to execute an insecure direct object reference attack. A successful exploit could allow the attacker to access specific data that is associated with different users on the affected system.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン