Cisco Finesse Server-Side Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain limited sensitive information for services that are associated with the affected device. Cisco plans to release software updates that address this vulnerability. There are no workarounds that address this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-20362US | high7.2 | — | ||
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- Cisco Finesse Server-Side Request Forgery Vulnerabilityself
- Cisco's Transition to a Risk-Based Vulnerability Disclosure Modelexternal
- Cisco Security Vulnerability Policyexternal
- fixed software releaseexternal
- Cisco Support and Downloadsexternal
- Cisco Technical Assistance Center (TAC)external
- the advisoriesexternal
remediations (29)
- Fixed12.6(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES11
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES7_ET
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)ES9
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(2)ES1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(2)ES2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(2)ES3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(2)ES4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(2)ES5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(2)ES6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(2)ES7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(2)ES8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.0(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.0(1)ES202508
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.0(1)ES202511
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.0(1)ES202602
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.0(1)SU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.0(1)SU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Unified Contact Center Express
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan