Browse CVEs

MEDIUM 6.1 CVE-2023-23208 Genesys Administrator Extension (GAX) before 9.0.105.15 is vulnerable to Cross Site Scripting (XSS) via the Business Structure page of the iWD plugin… Administrator Extension 9.0.105.15+ Fix from $1,6002023-08-13 HIGH 8.8 CVE-2023-29930 An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via the login… Tftp Server Mitigation only Fix from $1,9502023-05-10 MEDIUM 6.1 CVE-2022-37775 Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the part… Pureconnect after 2022-09-26 Fix from $1,6002022-09-16 MEDIUM 6.1 CVE-2021-26787 A cross site scripting (XSS) vulnerability in Genesys Workforce Management 8.5.214.20 can occur (during record deletion) via the Time-off parameter. Workforce Management Mitigation only Fix from $1,6002021-12-15 HIGH 7.2 CVE-2021-40860 A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) before 9.0.013.11 allows an attacker to execu… Intelligent Workload Distribution Manager 9.0.013.11+ Fix from $1,9502021-12-08 HIGH 7.2 CVE-2021-40861 A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) 9.0.017.07 allows an attacker to execute arbi… Intelligent Workload Distribution Manager 9.0.017.07+ Fix from $1,9502021-12-08 MEDIUM 6.1 CVE-2019-17176 Genesys PureEngage Digital (eServices) 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp (ActionColor, ClientNickNameColor, Email, email… Eservices Chat after 8.1.200.03 Fix from $1,6002019-10-11