finesse vulnerabilities
CVEs whose affected-version data names the finesse package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-20278Medium· 6.0Cisco Unified Communications Products Command Injection Vulnerability (CVE-2025-20278)
A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vuln…
▾ SunlitCisco · Cisco Unified Communications ManagerEPSS 0.18%via CSAF
CVE-2025-20112Medium· 5.1Cisco Unified Communications Products Privilege Escalation Vulnerability (CVE-2025-20112)
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive perm…
▾ SunlitCisco · Cisco Unified Communications ManagerEPSS 0.14%via CSAF