Cisco Finesse Web-Based Management Interface Vulnerabilities [CVE-2024-20404 and CVE-2024-20405]
CVE numbers = CVE-2024-20404 and CVE-2024-20405
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to perform a stored cross site-scripting (XSS) attack by exploiting a remote file inclusion (RFI) vulnerability or perform a server-side request forgery (SSRF) attack an affected system.
Cisco has released software updates that address these vulnerabilities.
There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-ssrf-rfi-Um7wT8Ew
![Cisco Finesse Web-Based Management Interface Vulnerabilities [CVE-2024-20404 and CVE-2024-20405]](https://i0.wp.com/www.systemtek.co.uk/wp-content/uploads/2023/08/jason-d.jpg?resize=100%2C100)
I am one of the editors here at www.systemtek.co.uk I am a UK based technology professional, with an interest in computer security and telecoms.