Cisco Finesse
16 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Cisco Finesse, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
Cisco Finesse CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 1 |
| 2025-06 | 1 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 1 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 1 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 16 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical2
- High2
- Medium12
Latest CVEs
The 15 most recently published vulnerabilities affecting Cisco Finesse.
- CVE-2026-20175Cisco Finesse File Inclusion Vulnerability6.1
- CVE-2026-20116Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities6.1
- CVE-2025-20278Cisco Unified Communications Products Command Injection Vulnerability6.0
- CVE-2025-20112Cisco Unified Communications Products Privilege Escalation Vulnerability5.1
- CVE-2024-20405A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI vulnerability. This vu...4.8
- CVE-2024-20404A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system. This vulnerability is due ...7.2
- CVE-2023-20088Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability5.3
- CVE-2021-1358Cisco Finesse Open Redirect Vulnerability4.7
- CVE-2021-1254Cisco Finesse Cross-Site Scripting Vulnerabilities4.8
- CVE-2021-1245Cisco Finesse OpenSocial Gadget Editor Cross-Site Scripting Vulnerability6.5
- CVE-2021-1246Cisco Finesse OpenSocial Gadget Editor Unauthenticated Access Vulnerability6.5
- CVE-2020-3159Cisco Finesse Web-Based Management Interface Cross-Site Scripting Vulnerability6.1
- CVE-2019-15278Cisco Finesse Cross-Site Scripting Vulnerability6.1
- CVE-2019-12632Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability7.5
- CVE-2017-12337A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthor...9.8
Product grouping is registry-driven, with AI assist and human review. How it works