Medium severity6.1NVD Advisory· Published Jul 4, 2017· Updated May 13, 2026
CVE-2017-6722
CVE-2017-6722
Description
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information: CSCuw86638. Known Affected Releases: 10.6(1). Known Fixed Releases: 11.5(1.10000.61).
Affected products
4cpe:2.3:a:cisco:unified_contact_center_express:11.5\(1\):*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:cisco:unified_contact_center_express:11.5\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_contact_center_express:11.5.1es01:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_contact_center_express:11.5.1su1:*:*:*:*:*:*:*
- Range: Cisco Unified Contact Center Express
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.securityfocus.com/bid/99201nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1038749nvdThird Party AdvisoryVDB Entry
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-uccenvdVendor Advisory
News mentions
0No linked articles in our index yet.