Finesse
Vendor:
First CVE: Aug 12, 2013 · Active for 12 years
25
Total CVEs
More Total CVEs than 95% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 39% of tracked products
4.0%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Finesse over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 12, 2013
12 years ago
Most Recent CVE
Jun 4, 2025
416 days ago
CVE Severity & Scoring
Finesse25 CVEs
60%
24%
16%
All CVEs352,708 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (4.0%)
Network19 (76.0%)
Unknown5 (20.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low20 (80.0%)
High0 (0.0%)
Unknown5 (20.0%)
User Interaction
None10 (40.0%)
Unknown5 (20.0%)
Required10 (40.0%)
Privileges Required
Low0 (0.0%)
High2 (8.0%)
None18 (72.0%)
Unknown5 (20.0%)
Top CVEs
Signals from CVEs in this product scope (25 CVEs).
25 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-44228CRITICAL Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect agai | Dec 10, 2021 | 10.0 | 99 | YES | YES |
CVE-2024-20404MEDIUM A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system.
This vuln | Jun 5, 2024 | 5.3 | 33 | NO | YES |
CVE-2017-12337CRITICAL A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker | Nov 16, 2017 | 9.8 | 33 | NO | NO |
CVE-2018-0399CRITICAL Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected sy | Jul 18, 2018 | 9.8 | 29 | NO | NO |
CVE-2018-0398CRITICAL Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) atta | Jul 18, 2018 | 9.8 | 28 | NO | NO |
CVE-2016-1373HIGH The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1 | May 5, 2016 | 8.6 | 28 | NO | NO |
CVE-2023-20088HIGH A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a de | Mar 3, 2023 | 7.5 | 26 | NO | NO |
CVE-2019-12632HIGH A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected sy | Sep 5, 2019 | 7.5 | 24 | NO | NO |
CVE-2021-1246MEDIUM Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability
A vulnerability in the web management interfa | Jan 13, 2021 | 6.1 | 22 | NO | NO |
CVE-2017-6779HIGH Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, r | Jun 7, 2018 | 7.5 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (25 CVEs).
CISA KEV
1 CVE
4.0% of CVEs· 97th percentile
Metasploit
1 CVE
4.0% of CVEs· 96th percentile
Nuclei
2 CVEs
8.0% of CVEs· 97th percentile
ExploitDB
1 CVE
4.0% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (25 CVEs).
Media Mentions
Signals from CVEs in this product scope (25 CVEs).
Top CNAs Publishing CVEs For Finesse
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.5\(1\) | 1 | 7.5 | 2.0% | 0 | 0 |
| 9.1\(1\)_su1.1 | 1 | 8.6 | 1.1% | 0 | 0 |
| 9.1\(1\)_su1 | 1 | 8.6 | 1.1% | 0 | 0 |
| 9.1\(1\)_es5 | 1 | 8.6 | 1.1% | 0 | 0 |
| 9.1\(1\)_es4 | 1 | 8.6 | 1.1% | 0 | 0 |
| 9.1\(1\)_es3 | 1 | 8.6 | 1.1% | 0 | 0 |
| 9.1\(1\)_es2 | 1 | 8.6 | 1.1% | 0 | 0 |
| 9.1\(1\)_es1 | 1 | 8.6 | 1.1% | 0 | 0 |
| 9.1\(1\)_base | 1 | 8.6 | 1.1% | 0 | 0 |
| 9.0\(2\)_base | 1 | 8.6 | 1.1% | 0 | 0 |
| 9.0\(1\)_base | 1 | 8.6 | 1.1% | 0 | 0 |
| 8.6\(1\)_base | 1 | 8.6 | 1.1% | 0 | 0 |
| 8.5\(5\)_base | 1 | 8.6 | 1.1% | 0 | 0 |
| 8.5\(4\)_base | 1 | 8.6 | 1.1% | 0 | 0 |
| 8.5\(3\)_base | 1 | 8.6 | 1.1% | 0 | 0 |
| 8.5\(2\)_base | 1 | 8.6 | 1.1% | 0 | 0 |
| 8.5\(1\)_base | 1 | 8.6 | 1.1% | 0 | 0 |
| 12.6\(2\) | 3 | 6.2 | 5.7% | 0 | 1 |
| 12.6\(1\) | 3 | 7.6 | 23.0% | 1 | 1 |
| 12.5\(2\) | 1 | 6.7 | 0.2% | 0 | 0 |