CVE-2008-4542

Cisco Unity < 4.2(1)ES162, < 5.0(1)ES56, < 7.0(2)ES8 - Authenticated Stored Cross-Site Scripting

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database (aka data store).

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/45744

Various Sources x_refsource_misc

http://www.voipshield.com/research-details.php?id=127

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/31642

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1021012

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32207

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/2771

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html

Scores

EPSS 0.0102

EPSS Percentile 59.8%

Details

CWE

CWE-79

Status published

Products (10)

cisco/unity 4.0

cisco/unity 4.0\(1\)

cisco/unity 4.0\(2\)

cisco/unity 4.0\(3\) (2 CPE variants)

cisco/unity 4.0\(4\) (2 CPE variants)

cisco/unity 4.0\(5\)

cisco/unity 4.1\(1\)

cisco/unity 5.0

cisco/unity 7.0

cisco/unity < 4.2\(1\)

Published Oct 13, 2008

Tracked Since Feb 18, 2026