Cisco Unified Contact Center Enterprise - Apache Struts Evaluation help

[horhif100]

Hi,

I am trying to find out if this vulnerability, Apache Struts CVE-2017-5638, affects version 9.0.1 of the Cisco Unified Contact Center Enterprise product?

Cisco's website states it affects version 9.0.(4) ES, so does that include previous versions and therefore 9.0.1 or is it specifically 9.0.(4) ES?

Thanks for any advice

[Manish Gogna]

Since 9.0(4) ES is mentioned specifically the 9.0.1 should be fine

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd51210

HTH

Manish

[Mario Sosa]

Is 9.0(4) a separate version then 9.0(4)ES or are they considered the same ?