Cisco Unity Server vulnerabilities

4 CVEs affecting Cisco Unity Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-0356, published 2005-05-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-0356, published 2005-05-31. Medium severity, CVSS 5.0. EPSS: 82.8% chance of exploitation in the next 30 days. Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a…
CVE-2004-1322, published 2004-12-15. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change…
CVE-2002-1190, published 2002-10-28. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.
CVE-2002-1189, published 2002-10-11. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international…