All vulnerabilities
CVE-2026-20362

Cisco Finesse Server-Side Request Forgery Vulnerability

Cisco Cisco FinesseNetwork & edge
Open in ThreatlineRecord JSON
CVSS
7.2High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.47%Chance of exploitation activity in the next 30 days, higher than 39% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published7 Oct 2026Updated 7 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device.

This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain limited sensitive information for services that are associated with the affected device.

Text from CVE List

Affected versions 28

  • Cisco Finesseaffected: 12.6(1)CVE List
  • Cisco Finesseaffected: 12.6(1)ES1CVE List
  • Cisco Finesseaffected: 12.6(1)ES2CVE List
  • Cisco Finesseaffected: 12.6(1)ES3CVE List
  • Cisco Finesseaffected: 12.6(1)ES4CVE List
  • Cisco Finesseaffected: 12.6(1)ES5CVE List
  • Cisco Finesseaffected: 12.6(1)ES6CVE List
  • Cisco Finesseaffected: 12.6(1)ES7CVE List
  • Cisco Finesseaffected: 12.6(1)ES7_ETCVE List
  • Cisco Finesseaffected: 12.6(2)CVE List
  • Cisco Finesseaffected: 12.6(1)ES8CVE List
  • Cisco Finesseaffected: 12.6(1)ES9CVE List
  • Cisco Finesseaffected: 12.6(2)ES1CVE List
  • Cisco Finesseaffected: 12.6(1)ES10CVE List
  • Cisco Finesseaffected: 12.6(1)ES11CVE List
  • Cisco Finesseaffected: 12.6(2)ES2CVE List
  • Cisco Finesseaffected: 12.6(2)ES3CVE List
  • Cisco Finesseaffected: 12.6(2)ES4CVE List
  • Cisco Finesseaffected: 12.6(2)ES5CVE List
  • Cisco Finesseaffected: 15.0(1)CVE List
  • Cisco Finesseaffected: 12.6(2)ES6CVE List
  • Cisco Finesseaffected: 15.0(1)ES202508CVE List
  • Cisco Finesseaffected: 15.0(1)ES202511CVE List
  • Cisco Finesseaffected: 15.0(1)ES202602CVE List
  • Cisco Finesseaffected: 15.0(1)SU1CVE List
  • Cisco Finesseaffected: 12.6(2)ES7CVE List
  • Cisco Finesseaffected: 15.0(1)SU2CVE List
  • Cisco Finesseaffected: 12.6(2)ES8CVE List

References 1