{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-28T20:32:18.615","vulnerabilities":[{"cve":{"id":"CVE-2024-20404","sourceIdentifier":"psirt@cisco.com","published":"2024-06-05T17:15:11.790","lastModified":"2024-11-21T08:52:33.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system.\r\n\r This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent to an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to obtain limited sensitive information for services that are associated to the affected device."},{"lang":"es","value":"Una vulnerabilidad en la interfaz de administración basada en web de Cisco Finesse podría permitir que un atacante remoto no autenticado lleve a cabo un ataque SSRF en un sistema afectado. Esta vulnerabilidad se debe a una validación insuficiente de la entrada proporcionada por el usuario para solicitudes HTTP específicas que se envían a un sistema afectado. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud HTTP manipulada al dispositivo afectado. Un exploit exitoso podría permitir al atacante obtener información confidencial limitada para los servicios asociados al dispositivo afectado."}],"metrics":{"cvssMetricV31":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}]},"weaknesses":[{"source":"psirt@cisco.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:finesse:*:*:*:*:*:*:*:*","versionEndExcluding":"11.6\\(1\\)","matchCriteriaId":"4E2816BE-3DC9-4248-90EF-AB5E2AF3CB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:finesse:11.6\\(1\\):-:*:*:*:*:*:*","matchCriteriaId":"7E507E31-71FA-437D-B325-48281650CFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:finesse:11.6\\(1\\):es4:*:*:*:*:*:*","matchCriteriaId":"D917999F-E9AF-40C2-969A-36C8D5934590"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:finesse:11.6\\(1\\):es5:*:*:*:*:*:*","matchCriteriaId":"83BC183B-4CB6-47FB-9AAA-78E5E75BEB3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:finesse:11.6\\(1\\):es6:*:*:*:*:*:*","matchCriteriaId":"93E2DBF0-FAF3-40A7-8BA4-9A56CD6D8939"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:finesse:11.6\\(1\\):es7:*:*:*:*:*:*","matchCriteriaId":"A071AD17-9134-43D0-A3C3-FF7348AA0DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:finesse:11.6\\(1\\):es8:*:*:*:*:*:*","matchCriteriaId":"0EBC41A8-BE9B-4F19-A287-52A9DFEF2162"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:finesse:12.6\\(2\\):-:*:*:*:*:*:*","matchCriteriaId":"8C98A1AA-4F49-4DD8-B4F4-6194E487BBE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:finesse:12.6\\(2\\):es01:*:*:*:*:*:*","matchCriteriaId":"CCCF715C-5DDF-4586-AF7B-C2C3579F6041"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:finesse:12.6\\(2\\):es02:*:*:*:*:*:*","matchCriteriaId":"2C21D0F8-E157-4094-98BF-0CCCE0505CA3"}]}]}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-ssrf-rfi-Um7wT8Ew","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-ssrf-rfi-Um7wT8Ew","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}