Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-21	CVE-2023-20265	Cross-site Scripting vulnerability in Cisco products A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. network low complexity cisco CWE-79	5.4
2020-06-18	CVE-2020-3360	Incorrect Authorization vulnerability in Cisco products A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote attacker to view sensitive information on an affected device. network low complexity cisco CWE-863	5.3