← Back

Upstreamworks

upstreamworks

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Upstream Works On Finesse
upstream_works_on_finesse
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-37462
1Upstreamworks
1Upstream Works On Finesse
Jun 17, 2026
Apr 10, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentI...Show more
A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentId in the file-upload details.Show less