CVE-2016-1300: Cisco Unity Connection

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582.

Affected products

• Cisco Unity Connection: version 10.5(2.3009) only

Published 2016-01-27. Last modified 2026-06-17.