Mohamed Saleh

**Name of the Vulnerable Software and Affected Versions** IBM Security Guardium version 11.5 **Description** The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. This is due to a server-side request forgery (SSRF) vulnerability. **Recommendations** For IBM Security Guardium version 11.5, as a temporary workaround, consider restricting access to sensitive network resources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco Unified Contact Center Management Portal (Unified CCMP) (affected versions not specified) Description: A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This issue exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this by persuading a user to click a crafted link, potentially allowing the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.