CVE:CVE-2018-15403
CNNVD:CNNVD-201810-194
Cisco Emergency Responder等都是美国思科（Cisco）公司的产品。Cisco Emergency Responder是一套IP通信系统中的应急呼叫软件。Finesse是一套下一代客户协作服务解决方案。
多款Cisco产品中的Web界面存在开放重定向漏洞，该漏洞源于程序没有正确的对HTTP请求中的参数执行输入验证。远程攻击者可通过发送特制的HTTP请求利用该漏洞重定向用户至恶意Web页面。以下产品受到影响：Cisco Emergency Responder；Unified Communications Manager；Unified Communications Manager IM & Presence Service；Unity Connection。
solution:Upgrade cisco unified_communications_manager to a higher version than 10.5(2.10000.5,11.0(1.10000.10,11.5(1.10000.6,12.0(1.10000.10,and avoid the version 10.5(2.10000.5),11.0(1.10000.10),11.5(1.10000.6),12.0(1.10000.10); Upgrade cisco unity_connection to a higher version than 9.1(1es23,and avoid the version 9.1(1)es23; Upgrade cisco unified_communications_manager_im_and_presence_service to a higher version than 10.5(1,10.5(2,12.0(1,12.5(1,and avoid the version 10.5(1),10.5(2),12.0(1),12.5(1); Upgrade cisco emergency_responder to a higher version than 11.5(4.59000.1,12.0(1.40000.3,12.5(0.98000.110,and avoid the version 11.5(4.59000.1),12.0(1.40000.3),12.5(0.98000.110)