What’s Vulnerable › Products

Cisco Finesse vulnerabilities

28 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Cisco Finesse version is affected

Exploited Cisco Finesse vulnerabilities

• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability

Latest Cisco Finesse vulnerabilities

• CVE-2026-20362 — Cisco Finesse Server-Side Request Forgery Vulnerability (CVSS 7.2)
• CVE-2026-20175 — Cisco Finesse File Inclusion Vulnerability (CVSS 6.1)
• CVE-2025-20278 — Cisco Unified Communications Products Command Injection Vulnerability (CVSS 6.7)
• CVE-2025-20112 — Cisco Unified Communications Products Privilege Escalation Vulnerability (CVSS 5.1)
• CVE-2024-20405 — (CVSS 6.1)
• CVE-2024-20404 — (CVSS 5.3)
• CVE-2023-20088 — Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability (CVSS 7.5)
• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability (CVSS 10.0) — exploited
• CVE-2021-1358 — Cisco Finesse Open Redirect Vulnerability (CVSS 6.1)
• CVE-2021-1254 — Cisco Finesse Cross-Site Scripting Vulnerabilities (CVSS 4.8)
• CVE-2021-1246 — Cisco Finesse OpenSocial Gadget Editor Unauthenticated Access Vulnerability (CVSS 6.1)
• CVE-2021-1245 — Cisco Finesse OpenSocial Gadget Editor Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2020-3159 — Cisco Finesse Web-Based Management Interface Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2019-15278 — Cisco Finesse Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2019-12632 — Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability (CVSS 7.5)
• CVE-2018-0399 — (CVSS 9.8)
• CVE-2018-0398 — (CVSS 9.8)
• CVE-2017-6779 — (CVSS 7.5)
• CVE-2017-12337 — (CVSS 9.8)
• CVE-2017-12288 — (CVSS 6.1)
• CVE-2017-6761 — (CVSS 6.1)
• CVE-2016-6442 — (CVSS 8.8)
• CVE-2016-1373 — (CVSS 8.6)
• CVE-2015-4310 — (CVSS 4.3)
• CVE-2015-0754 — (CVSS 7.5)