Cisco

Unity

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5

CVE-2008-4542

  • EPSS 0.34%
  • Published 13.10.2008 20:00:02
  • Last modified 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database (aka data...

7.1

CVE-2008-4543

  • EPSS 1.19%
  • Published 13.10.2008 20:00:02
  • Last modified 09.04.2025 00:30:58

Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number o...

5

CVE-2008-4544

  • EPSS 3.43%
  • Published 13.10.2008 20:00:02
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."

4

CVE-2008-4545

  • EPSS 0.28%
  • Published 13.10.2008 20:00:02
  • Last modified 09.04.2025 00:30:58

Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this direct...

5.8

CVE-2008-3814

  • EPSS 0.48%
  • Published 08.10.2008 22:00:01
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modi...