PT-2008-5774 · Cisco · Cisco Unity

Published 2008-10-13 · Updated 2017-08-08 · CVE-2008-4542

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unity versions 4.x before 4.2(1)ES162 Cisco Unity versions 5.x before 5.0(1)ES56 Cisco Unity versions 7.x before 7.0(2)ES8

Description A cross-site scripting (XSS) issue allows remote authenticated administrators to inject arbitrary web script or HTML into the database by entering it, potentially leading to execution of malicious code.

Recommendations For Cisco Unity versions 4.x, update to version 4.2(1)ES162 or later. For Cisco Unity versions 5.x, update to version 5.0(1)ES56 or later. For Cisco Unity versions 7.x, update to version 7.0(2)ES8 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-4542

Affected Products

Cisco Unity

References · 8

• http://secunia.com/advisories/32207 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4542 · Security Note
• http://cisco.com/en/US/products/products_security_response09186a0080a0d861.html · Vendor Advisory
• http://securityfocus.com/bid/31642 · Note
• http://voipshield.com/research-details.php?id=127 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45744 · Note
• http://vupen.com/english/advisories/2008/2771 · Note
• http://securitytracker.com/id?1021012 · Note