PT-2008-5774 · Cisco · Cisco Unity

Publicado 2008-10-13 · Atualizado 2017-08-08 · CVE-2008-4542

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unity versions 4.x before 4.2(1)ES162 Cisco Unity versions 5.x before 5.0(1)ES56 Cisco Unity versions 7.x before 7.0(2)ES8

Description A cross-site scripting (XSS) issue allows remote authenticated administrators to inject arbitrary web script or HTML into the database by entering it, potentially leading to execution of malicious code.

Recommendations For Cisco Unity versions 4.x, update to version 4.2(1)ES162 or later. For Cisco Unity versions 5.x, update to version 5.0(1)ES56 or later. For Cisco Unity versions 7.x, update to version 7.0(2)ES8 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-4542

Produtos afetados

Cisco Unity

Referências · 8

• http://secunia.com/advisories/32207 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-4542 · Nota de Segurança
• http://securityfocus.com/bid/31642 · Nota
• http://voipshield.com/research-details.php?id=127 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45744 · Nota
• http://cisco.com/en/US/products/products_security_response09186a0080a0d861.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2771 · Nota
• http://securitytracker.com/id?1021012 · Nota