Cisco: >> Unity Express Software >> 7.2 Security Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527.
CVSS Score
4.3
EPSS Score
0.07
Published
2013-02-13
Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software before 8.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCue35910.
CVSS Score
6.8
EPSS Score
0.003
Published
2013-02-06