Genesys

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Genesys records in CISA KEV

No Genesys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Intelligent Workload Distribution Manager 2 records LOW Administrator Extension 1 record LOW Eservices Chat 1 record LOW Pureconnect 1 record LOW Tftp Server 1 record MEDIUM Workforce Management 1 record LOW

Records

7 records

TI-2023-14080 CVE-2023-29930 · GHSA-p7g9-f957-fr79

An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version…

MEDIUM 44

An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via the login crednetials to the TFTP server configuration page.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02014 Published 2023-05-10 No fix listed CWE-434

TI-2021-17784 CVE-2021-40861 · GHSA-w8xx-5j5x-h7v6

A SQL Injection in the custom filter query component in Genesys intelligent Workload…

LOW 35

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) 9.0.017.07 allows an attacker to execute arbitrary SQL queries via the value attribute, with which all data in the d…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01738 Published 2021-12-08 No fix listed CWE-89

TI-2021-17783 CVE-2021-40860 · GHSA-j77p-xp62-rqm6

A SQL Injection in the custom filter query component in Genesys intelligent Workload…

LOW 35

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) before 9.0.013.11 allows an attacker to execute arbitrary SQL queries via the ql_expression parameter, with which al…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01738 Published 2021-12-08 No fix listed CWE-89

TI-2022-17554 CVE-2022-37775 · GHSA-27pq-p52w-4h65

Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September…

LOW 29

Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the participant -> name JSON POST parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00943 Published 2022-09-16 No fix listed CWE-79

TI-2021-08433 CVE-2021-26787 · GHSA-m3g9-6hxq-c8fj

A cross site scripting (XSS) vulnerability in Genesys Workforce Management 8.5.214.20 can…

LOW 29

A cross site scripting (XSS) vulnerability in Genesys Workforce Management 8.5.214.20 can occur (during record deletion) via the Time-off parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00758 Published 2021-12-15 No fix listed CWE-79

TI-2019-12802 CVE-2019-17176 · GHSA-75rw-9xw4-g4fp

Genesys PureEngage Digital (eServices) 8.1.x allows XSS via HtmlChatPanel.jsp or…

LOW 29

Genesys PureEngage Digital (eServices) 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp (ActionColor, ClientNickNameColor, Email, email, or email_address parameter).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00857 Published 2019-10-11 No fix listed CWE-79

TI-2023-09170 CVE-2023-23208 · GHSA-qgwg-3wfc-c76w

Genesys Administrator Extension (GAX) before 9.0.105.15 is vulnerable to Cross Site…

LOW 27

Genesys Administrator Extension (GAX) before 9.0.105.15 is vulnerable to Cross Site Scripting (XSS) via the Business Structure page of the iWD plugin, aka GAX-11261.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-08-13 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	4
Low	0
No CVSS	0