Cisco Security Advisory – Cisco Unified Contact Center Express (Cisco Unified CCX) server contains both a directory traversal vulnerability and a script injection vulnerability in the administration pages of the Customer Response Solutions (CRS) and Cisco Unified IP Interactive Voice Response (Cisco Unified IP IVR) products. Exploitation of these vulnerabilities could result in a denial of service condition, information disclosure, or a privilege escalation attack.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/79280/cisco-sa-20090715-uccx.txt
Source: https://packetstormsecurity.com/files/79280/Cisco-Security-Advisory-20090715-uccx.html