Cisco Cisco Finesse

Name: Cisco Cisco Finesse
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical3high9medium0low

updated 2026-10-28

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-20404US	medium5.3	22.6% (98th)	Exploit	no fix	2024-06-05	4 versions
CVE-2024-20405US	medium6.1	0.65% (51st)	Exploit	no fix	2024-06-05	4 versions
CVE-2018-0398US	critical9.8	2.04% (81st)	—	no fix	2018-07-18	—
CVE-2017-6779US	high7.5	1.98% (81st)	—	no fix	2018-06-07	—
CVE-2018-0399US	critical9.8	1.86% (79th)	—	no fix	2018-07-18	—
CVE-2019-12632US	high7.5	1.56% (75th)	—	12.0(1)ES01	2019-09-05	2 versions
CVE-2021-1246US	medium6.1OT elevated	1.44% (73rd)	—	no fix	2021-01-13	—
CVE-2021-1245US	medium6.1	1.38% (72nd)	—	no fix	2021-01-13	—
CVE-2019-15278US	medium6.1	0.90% (59th)	—	n/a	2020-01-26	2 versions
CVE-2020-3159US	medium6.1	0.80% (56th)	—	n/a	2020-02-19	2 versions
CVE-2023-20088US	high7.5	0.80% (56th)	—	no fix	2023-03-03	—
CVE-2021-1358US	medium6.1	0.78% (56th)	—	no fix	2021-05-22	—
CVE-2021-1254US	medium4.8	0.72% (54th)	—	no fix	2021-05-22	—
CVE-2026-20116US	—	0.22% (13th)	—	no fix	2026-03-11	—
CVE-2026-20175US	—	0.18% (8th)	—	no fix	2026-06-03	91 versions
CVE-2025-20278US	medium6.7	0.18% (7th)	—	no fix	2025-06-04	85 versions
CVE-2025-20112US	—	0.14% (4th)	—	no fix	2025-05-21	85 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-918Server-Side Request Forgery (SSRF)4 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-264CWE-2642 CVEs
CWE-268Privilege Chaining1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-399CWE-3991 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.