12.0.1.es.7

DATE	CVE	VULNERABILITY TITLE	RISK
2021-07-22	CVE-2021-1599	Cross-site Scripting vulnerability in Cisco Unified Customer Voice Portal A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user. network low complexity cisco CWE-79	5.4
2020-07-02	CVE-2020-3402	Missing Authentication for Critical Function vulnerability in Cisco Unified Customer Voice Portal A vulnerability in the Java Remote Method Invocation (RMI) interface of Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. network low complexity cisco CWE-306	7.5