cisco finesse

Name: cisco finesse
Brand: cisco

productUS

cpe:2.3:a:cisco:finesse:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical6high15medium0low

updated 2026-10-28

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	12.6\(1\)	2021-12-10	3 versions
CVE-2024-20404US	medium5.3	22.6% (98th)	Exploit	11.6\(1\)	2024-06-05	3 versions
CVE-2024-20405US	medium6.1	0.65% (51st)	Exploit	11.6\(1\)	2024-06-05	3 versions
CVE-2017-12337US	critical9.8	6.44% (94th)	—	no fix	2017-11-16	—
CVE-2015-4310US	medium4.3	2.16% (82nd)	—	no fix	2015-08-19	= 10.5(1)_base
CVE-2013-3457US	medium5.0	2.15% (82nd)	—	no fix	2013-08-12	—
CVE-2013-3455US	medium5.0	2.13% (82nd)	—	no fix	2013-08-12	—
CVE-2018-0398US	critical9.8	2.04% (81st)	—	no fix	2018-07-18	= 11.5(1)
CVE-2017-6779US	high7.5	1.98% (81st)	—	11.5\(3\)	2018-06-07	2 versions
CVE-2015-0754US	high7.5	1.96% (80th)	—	no fix	2015-05-29	= 10.5(1)_base
CVE-2018-0399US	critical9.8	1.86% (79th)	—	no fix	2018-07-18	= 11.5(1)
CVE-2019-12632US	high7.5	1.56% (75th)	—	no fix	2019-09-05	3 versions
CVE-2021-1246US	medium6.1OT elevated	1.44% (73rd)	—	12.0\(1\)	2021-01-13	3 versions
CVE-2021-1245US	medium6.1	1.38% (72nd)	—	12.0\(1\)	2021-01-13	3 versions
CVE-2015-0714US	medium4.3	1.35% (71st)	—	no fix	2015-05-02	4 versions
CVE-2017-6761US	medium6.1	1.23% (69th)	—	no fix	2017-08-07	2 versions
CVE-2017-12288US	medium6.1	1.22% (69th)	—	no fix	2017-10-19	= 11.5(1)
CVE-2016-1373US	high8.6	1.06% (64th)	—	no fix	2016-05-05	31 versions
CVE-2016-6442US	high8.8	0.93% (60th)	—	no fix	2016-10-27	= 11.0(1)_base
CVE-2019-15278US	medium6.1	0.90% (59th)	—	no fix	2020-01-26	3 versions
CVE-2020-3159US	medium6.1	0.80% (56th)	—	12.5\(1\)	2020-02-19	< 12.5\(1\)
CVE-2023-20088US	high7.5	0.80% (56th)	—	12.6\(1\)	2023-03-03	2 versions
CVE-2021-1358US	medium6.1	0.78% (56th)	—	no fix	2021-05-22	≤ 12.6\(1\)
CVE-2021-1254US	medium4.8	0.72% (54th)	—	12.6\(1\)	2021-05-22	< 12.6\(1\)
CVE-2025-20278US	medium6.7	0.18% (7th)	—	no fix	2025-06-04	20 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10 CVEs
CWE-918Server-Side Request Forgery (SSRF)5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-264CWE-2642 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-255CWE-2551 CVEs
CWE-285Improper Authorization1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan