Cisco Unity vulnerabilities

5 CVEs affecting Cisco Unity, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-4545, published 2008-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-4544, published 2008-10-13. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to…
CVE-2008-4543, published 2008-10-13. High severity, CVSS 7.1. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial…
CVE-2008-3814, published 2008-10-08. Medium severity, CVSS 5.8. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote…
CVE-2008-4545, published 2008-10-13. Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain…
CVE-2008-4542, published 2008-10-13. Low severity, CVSS 3.5. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remote authenticated administrators to inject arbitrary web…