Medium severity5.4NVD Advisory· Published Apr 10, 2023· Updated Jun 17, 2026
CVE-2022-37462
CVE-2022-37462
Description
A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentId in the file-upload details.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Upstream Works for Cisco Finesse/Agent Desktopdescription
- Range: <=4.2.12, <=5.0
- cpe:2.3:a:upstreamworks:upstream_works_on_finesse:*:*:*:*:*:*:*:*Range: >=4.0,<=4.2.14
Patches
Vulnerability mechanics
References
2- www.campusguard.com/post/going-beyond-pen-testing-to-identify-zero-day-exploitsnvdExploitThird Party Advisory
- www.upstreamworks.com/support/notifications/nvdVendor Advisory
News mentions
0No linked articles in our index yet.