Vulnerabilities (CVE)

Filtered by vendor Upstreamworks Subscribe
Filtered by product Upstream Works On Finesse
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-37462 1 Upstreamworks 1 Upstream Works On Finesse 2024-02-28 N/A 5.4 MEDIUM
A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentId in the file-upload details.