Known vulnerabilities in Cisco Unity Connection - page 2

Vendor: Cisco Systems, Inc
Software: Cisco Unity Connection
Software CPE: cpe:2.3:a:cisco_systems:cisco_unity_connection:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 33
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Unity Connection Cisco Unity Connection is affected by 33 known vulnerabilities: 1 critical, 4 high, 8 medium, 20 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49596 - Information Exposure Through Log Files
CVE-2021-1226		 CWE-532 Low
No
No
 11.5.1 SU9, 12.0.1 SU4, 12.5.1 SU3 13.01.2021 SB2021011902
#VU34095 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3532		 CWE-79 Low
No
No
 - 06.08.2020 SB2020080612
#VU29459 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3282		 CWE-79 Low
No
No
 10.5.2 SU10, 11.5.1 SU8 02.07.2020 SB2020070207
#VU24672 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3129		 CWE-79 Low
No
No
 12.5SU2 27.01.2020 SB2020012710
#VU24671 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-3130		 CWE-22 Medium
No
No
 11.5SU7, 12.5SU2 27.01.2020 SB2020012709
#VU17838 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1685		 CWE-79 Low
No
No
 - 22.02.2019 SB2019022204
#VU15219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15426		 CWE-79 Low
No
No
 10.5.2 ES125, 10.5.2 ES127, 10.5.2.18152.1, 10.5.2.18154.1, 11.5.1 ES54, 11.5.1 ES55, 11.5.1.15079.1, 11.5.1.15080.1, 11.5.1.16000.2, 12.0.1 ES16, 12.0.1.22011.2, 12.5.0.193, 12.5.0.197, 12.5.0.97000.274, 12.5.0.97000.280, 12.5.0.99834.1 09.10.2018 SB2018100309
#VU15218 - Improper input validation
CVE-2018-15396		 CWE-20 Low
No
No
 12.0.1.53, 12.0.1.22900.7, 12.5.0.202, 12.5.0.97000.301 03.10.2018 SB2018100309
#VU13215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0354		 CWE-79 Low
No
No
 12.5.0.15, 12.5.0.16, 12.5.0.17, 12.5.0.29, 12.5.0.38, 12.5.0.44, 12.5.0.97000.28, 12.5.0.97000.29, 12.5.0.97000.64, 12.5.0.97000.65, 12.5.0.97000.66 06.06.2018 SB2018060705
#VU10684 - Improper input validation
CVE-2018-0203		 CWE-20 Low
No
No
 - 22.02.2018 SB2018022207
#VU9387 - Improper Authentication
CVE-2017-12337		 CWE-287 High
No
No
 - 21.11.2017 SB2017112115
SB2017112116
SB2017112117
and 5 more
#VU8149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12212		 CWE-79 Low
No
No
 - 06.09.2017 SB2017090708
#VU6426 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-6629		 CWE-22 Low
No
No
 - 05.05.2017 SB2017050507


Showing elements 21 - 40 out of 33