CVE-2002-1189: Cisco Unity Server

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding.

Affected products

• Cisco Unity Server: version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only; version 2.46 only; …

Published 2002-10-11. Last modified 2026-06-16.