Vulnerability Report for CX Components 5.0

This vulnerability report of the CX components is scanned with Trivy Version 2.

ActiveMQ

There is 1 HIGH severity vulnerability in the report, fix is not available in the latest patch version of the stable release of ActiveMQ, which is 6.1.6.

Scan Report

Component

Engine

Low

Medium

High

Critical

Report

Active MQ

Trivy

0

6

1

0

ActiveMQ.json

Agent Desk

Scan Report

Component

Engine

Low

Medium

High

Critical

Report

Unfied-Agent

Trivy

0

unified-agent.json

Grafana

Trivy

101

62

77

9

Grafana.json

Campaigns

The critical and high-severity vulnerabilities in extended dependencies do not have a fix available currently.

Scan Report

Component

Engine

Low

Medium

High

Critical

Report

campaigns

Trivy

58

14

4

1

campaigns.json

conversation-studio

Trivy

114

21

10

1

conversation-studio.json

campaign-scheduler

Trivy

2

4

3

0

campaign-scheduler.json

Channels

Scan Report

Component	Engine	Low	Medium	Report
360-connector	Trivy	1	2	360-connector.json
facebook-connector	Trivy	1	2	facebook-connector.json
instagram-connector	Trivy	1	2	instagram-connector.json
hc_smpp_connector	Trivy	1	2	hc_smpp_connector.json
telegram-connector	Trivy	1	3	telegram-connector.json
twilio-connector	Trivy	1	3	twilio-connector.json
twitter-connector	Trivy	1	2	twitter-connector.json
viber-connector	Trivy	1	2	viber-connector.json
email-connector	Trivy	1	2	email-connector.json
whatsapp-connector	Trivy	1	2	whatsapp-connector.json
ms-exchange	Trivy	1	2	ms-exchange-email-connector.json
youtube-connector	Trivy	1	2	youtube-connector.json
linkedinconnector	Trivy	1	3	linkedinconnector.json

Core

Scan Report

Component	Engine	Low	Medium	High	Report
agent-manager	Trivy	2	1	2	agent-manager.json
bot-framework	Trivy	2	5	4	bot-framework.json
customer-channel-manager	Trivy	2	5	3	customer-channel-manager.json
cim-backend	Trivy	1	0	1	cim-backend.json
conversation-manager	Trivy	2	6	3	conversation-manager.json
conversation-monitor	Trivy	2	5	3	conversation-monitor.json
customer-widget	Trivy	0	0	0	customer-widget.json
cx-load-hub	Trivy	5	8	3	cx-load-hub.json
cx-tenant	Trivy	1	0	1	cx-tenant.json
file-engine	Trivy	1	3	4	file-engine.json
historical-reports-manager	Trivy	2	4	3	historical-reports-manager.json
license-manager	Trivy	3	4	5	license-manager.json
realtime-reports-manager	Trivy	2	5	5	realtime-reports-manager.json
media-routing-engine	Trivy	3	12	4	media-routing-engine.json
state-events-logger	Trivy	2	4	3	state-events-logger.json
team-announcement	Trivy	2	2	1	team-announcement.json
unified-admin	Trivy	2	4	1	unified-admin.json
web-channel-manager	Trivy	2	5	3	web-channel-manager.json
business-calendar	Trivy	2	4	4	buisness-calendar.json

Eleveo Middleware

Scan Report

Component

Engine

Low

Medium

High

Critical

Report

recording middleware

Trivy

4

16

8

0

recording-middleware.json

ef_cx_eleveo_recording_runner

Trivy

94

71

37

7

ef_cx_eleveo_recording_runner.json

eleveovr_2_ef-cx

Trivy

141

108

97

19

eleveovr_2_ef-cx.json

MTT-Single

Scan Report

Component

Engine

Low

Medium

High

Critical

Report

conversation-controller

Trivy

114

26

13

2

conversation-controller.json

conversation-studio

Trivy

114

21

10

1

conversation-studio.json

qm-backend

Trivy

58

13

5

1

qm-backend.json

QM

Scan Report

Component

Engine

Low

Medium

High

Critical

Report

QM Connector

Trivy

3

5

0

qm-connector.json

Qm-cisco-sync-service

Scan Report

Component

Engine

Low

Medium

High

Critical

Report

qm-cisco-sync-service

Trivy

3

4

1

0

qm-cisco-sync-service.json