Cisco: >> Unity Connection >> 8.6(1a) Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in the Web Inbox in Cisco Unity Connection 8.6(2a)SU3 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui33028.
CVSS Score
4.3
EPSS Score
0.003
Published
2014-04-02
Cisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2 allows remote attackers to cause a denial of service (services crash) via a series of crafted TCP segments, aka Bug ID CSCtq67899.
CVSS Score
7.8
EPSS Score
0.012
Published
2012-03-01
Page 3