CVE:CVE-2016-6427
CNNVD:CNNVD-201610-080
Cisco Unified Contact Center Express（Unified CCX）和Cisco Unified Intelligence Center（CUIC）都是美国思科（Cisco）公司的产品。Unified CCX是一款统一通信解决方案中的客户关系管理组件；CUIC是一套基于Web的报表平台。
Cisco Unified CCX 10.0(1)至11.0(1)版本中使用的CUIC 8.5.4至9.1(1)版本中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞执行未授权操作。
solution:Upgrade cisco unified_contact_center_express to a higher version than 10.0(1,10.5(1,10.6(1,11.0(1,and avoid the version 10.0(1),10.5(1),10.6(1),11.0(1); Upgrade cisco unified_intelligence_center to a higher version than 8.5.4,9.0(2,9.1(1,and avoid the version 8.5.4,9.0(2),9.1(1)