CVE-2026-20175

{"id": "CVE-2026-20175", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20175", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-03T17:45:48.882718Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Finesse", "versions": [{"status": "affected", "version": "11.0(1)ES_Rollback"}, {"status": "affected", "version": "10.5(1)ES4"}, {"status": "affected", "version": "11.6(1)ES3"}, {"status": "affected", "version": "11.0(1)ES2"}, {"status": "affected", "version": "12.0(1)ES2"}, {"status": "affected", "version": "10.5(1)ES3"}, {"status": "affected", "version": "11.0(1)"}, {"status": "affected", "version": "11.6(1)FIPS"}, {"status": "affected", "version": "11.6(1)ES4"}, {"status": "affected", "version": "11.0(1)ES3"}, {"status": "affected", "version": "10.5(1)ES6"}, {"status": "affected", "version": "11.0(1)ES7"}, {"status": "affected", "version": "11.5(1)ES4"}, {"status": "affected", "version": "10.5(1)ES8"}, {"status": "affected", "version": "11.5(1)"}, {"status": "affected", "version": "11.6(1)"}, {"status": "affected", "version": "10.5(1)ES10"}, {"status": "affected", "version": "11.6(1)ES2"}, {"status": "affected", "version": "11.6(1)ES"}, {"status": "affected", "version": "11.0(1)ES6"}, {"status": "affected", "version": "11.0(1)ES4"}, {"status": "affected", "version": "12.0(1)"}, {"status": "affected", "version": "11.6(1)ES7"}, {"status": "affected", "version": "10.5(1)ES7"}, {"status": "affected", "version": "11.6(1)ES8"}, {"status": "affected", "version": "11.5(1)ES1"}, {"status": "affected", "version": "11.6(1)ES1"}, {"status": "affected", "version": "11.5(1)ES5"}, {"status": "affected", "version": "11.0(1)ES1"}, {"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "11.6(1)ES6"}, {"status": "affected", "version": "10.5(1)ES2"}, {"status": "affected", "version": "12.0(1)ES1"}, {"status": "affected", "version": "11.0(1)ES5"}, {"status": "affected", "version": "10.5(1)ES5"}, {"status": "affected", "version": "11.5(1)ES3"}, {"status": "affected", "version": "11.5(1)ES2"}, {"status": "affected", "version": "10.5(1)ES9"}, {"status": "affected", "version": "11.6(1)ES5"}, {"status": "affected", "version": "11.6(1)ES9"}, {"status": "affected", "version": "11.5(1)ES6"}, {"status": "affected", "version": "10.5(1)ES1"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "12.0(1)ES3"}, {"status": "affected", "version": "11.6(1)ES10"}, {"status": "affected", "version": "12.5(1)ES1"}, {"status": "affected", "version": "12.5(1)ES2"}, {"status": "affected", "version": "12.0(1)ES4"}, {"status": "affected", "version": "12.5(1)ES3"}, {"status": "affected", "version": "12.0(1)ES5"}, {"status": "affected", "version": "12.5(1)ES4"}, {"status": "affected", "version": "12.0(1)ES6"}, {"status": "affected", "version": "12.5(1)ES5"}, {"status": "affected", "version": "12.5(1)ES6"}, {"status": "affected", "version": "12.0(1)ES7"}, {"status": "affected", "version": "12.6(1)"}, {"status": "affected", "version": "12.5(1)ES7"}, {"status": "affected", "version": "11.6(1)ES11"}, {"status": "affected", "version": "12.6(1)ES1"}, {"status": "affected", "version": "12.0(1)ES8"}, {"status": "affected", "version": "12.5(1)ES8"}, {"status": "affected", "version": "12.6(1)ES2"}, {"status": "affected", "version": "12.6(1)ES3"}, {"status": "affected", "version": "12.6(1)ES4"}, {"status": "affected", "version": "12.6(1)ES5"}, {"status": "affected", "version": "12.5(2)"}, {"status": "affected", "version": "12.5(1)_SU"}, {"status": "affected", "version": "12.5(1)SU"}, {"status": "affected", "version": "12.6(1)ES6"}, {"status": "affected", "version": "12.5(1)SU ES1"}, {"status": "affected", "version": "12.6(1)ES7"}, {"status": "affected", "version": "12.6(1)ES7_ET"}, {"status": "affected", "version": "12.6(2)"}, {"status": "affected", "version": "12.6(1)ES8"}, {"status": "affected", "version": "12.6(1)ES9"}, {"status": "affected", "version": "12.6(2)ES1"}, {"status": "affected", "version": "12.6(1)ES10"}, {"status": "affected", "version": "12.5(1)SU ES2"}, {"status": "affected", "version": "12.6(1)ES11"}, {"status": "affected", "version": "12.6(2)ES2"}, {"status": "affected", "version": "12.6(2)ES3"}, {"status": "affected", "version": "12.5(1)SU ES3"}, {"status": "affected", "version": "12.6(2)ES4"}, {"status": "affected", "version": "12.6(2)ES5"}, {"status": "affected", "version": "15.0(1)"}, {"status": "affected", "version": "12.6(2)ES6"}, {"status": "affected", "version": "15.0(1)ES202508"}, {"status": "affected", "version": "15.0(1)ES202511"}, {"status": "affected", "version": "15.0(1)ES202602"}, {"status": "affected", "version": "15.0(1)SU1"}, {"status": "affected", "version": "12.6(2)ES7"}], "defaultStatus": "unknown"}]}], "published": "2026-06-03T18:16:19.960", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-rfi-gwpkdc89", "source": "psirt@cisco.com"}], "vulnStatus": "Undergoing Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-73"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input for HTTP requests that are sent to an affected device. An attacker who has knowledge of the address of the affected device could exploit this vulnerability by persuading a user to click a crafted link that contains the affected device address. A successful exploit could allow the attacker to conduct browser-based attacks and execute arbitrary script code in the context of the affected interface or access sensitive information on the affected device."}, {"lang": "es", "value": "Una vulnerabilidad en Cisco Finesse podr\u00eda permitir a un atacante remoto no autenticado cargar archivos arbitrarios desde ubicaciones remotas en una sesi\u00f3n de usuario activa en un dispositivo afectado, lo que posiblemente llevar\u00eda a ataques basados en el navegador.\n\nEsta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la entrada proporcionada por el usuario para las solicitudes HTTP que se env\u00edan a un dispositivo afectado. Un atacante que tenga conocimiento de la direcci\u00f3n del dispositivo afectado podr\u00eda explotar esta vulnerabilidad persuadiendo a un usuario para que haga clic en un enlace manipulado que contenga la direcci\u00f3n del dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante realizar ataques basados en el navegador y ejecutar c\u00f3digo de script arbitrario en el contexto de la interfaz afectada o acceder a informaci\u00f3n sensible en el dispositivo afectado."}], "lastModified": "2026-07-22T19:10:00.120", "sourceIdentifier": "psirt@cisco.com"}