Cisco Finesse Remote File Inclusion Vulnerability

Descripción

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks. This vulnerability is due to insufficient validation of user-supplied input for HTTP requests that are sent to an affected device. An attacker who has knowledge of the address of the affected device could exploit this vulnerability by persuading a user to click a crafted link that contains the affected device address. A successful exploit could allow the attacker to conduct br

Identificador Cisco PSIRT

cisco-sa-finesse-rfi-gwpkdc89 — Advisory oficial Cisco PSIRT

Identificador CVE

CVE-2026-20175 — NVD National Vulnerability Database

Nivel de impacto

Security Impact Rating: Medium

Fuente oficial

Advisory publicado por Cisco Product Security Incident Response Team (PSIRT).