CVE-2024-20404 | Cisco Unified Contact Center Enterprise Web-Based Management Interface server-side request forgery (cisco-sa-finesse-ssrf-rfi-Um7wT8Ew)

A vulnerability, which was classified as critical, was found in Cisco Unified Contact Center Enterprise, Unified Contact Center Express, Finesse and Packaged Contact Center Enterprise. This affects an unknown part of the component Web-Based Management Interface. The manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2024-20404. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.