CVE-2009-2048: Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutio...

Security readout for executives and security teams

CVE-2009-2048 is an authenticated cross-site scripting flaw in Cisco Customer Response Solutions administration pages within Cisco Unified Contact Center Express. A logged-in remote user could place script or HTML into the CCX database. The source bundle does not provide CVSS, affected deployment details, or evidence of active exploitation. Exposure is most likely limited to organizations running Cisco CRS or Cisco Unified Contact Center Express administration pages earlier than 7.0(1) SR2. Internet exposure is not stated in the sources. The affected record fields in the bundle are incomplete, so confirm versions against Cisco guidance. Treat this as a targeted legacy Cisco contact-center risk. It is not known to be actively exploited from the provided sources, but affected admin systems should be upgraded or isolated because stored XSS can undermine administrator trust and session safety. Mitigation focus: Identify Cisco CRS or Unified Contact Center Express systems and their exact versions.; Upgrade affected deployments to Cisco-fixed guidance, including 7.0(1) SR2 where applicable.; Restrict administration interface access to trusted administrator networks..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.