CVE Feed

    Dashboard / CVE / CVE-2009-2048

    CVE-2009-2048

    Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified vectors.

    Published:Jul 16, 2009
    Last Modified:Apr 23, 2026
    EPS:Jul 16, 2009
    EPSS Score:0.00335
    CVSS Score:3.5

    Affected Products

    Vendor
    Cisco
    Product
    Crs
    Vendor
    Cisco
    Product
    Customer Response Applications
    Vendor
    Cisco
    Product
    Ip Qm
    Vendor
    Cisco
    Product
    Unified Ccx
    Vendor
    Cisco
    Product
    Unified Ip Contact Center Express
    Vendor
    Cisco
    Product
    Unified Ip Ivr

    Exploits

    No exploit reference

    Related CVEs

    CVE-2020-3569 (CVSS 8.6) — Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Sof…
    CVE-2020-3120 (CVSS 6.5) — A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software,…
    CVE-2019-16027 (CVSS 6.5) — A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–…
    CVE-2019-16022 (CVSS 8.6) — Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functional…
    CVE-2019-16020 (CVSS 8.6) — Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functional…
    CVE-2019-16018 (CVSS 6.5) — A vulnerability in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Ci…
    CVE-2019-15989 (CVSS 8.6) — A vulnerability in the implementation of the Border Gateway Protocol (BGP) functionality in Cisco IOS XR Softw…
    CVE-2009-2047 (CVSS 9) — Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) b…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High