GCVE - cpe:2.3:a:cisco:unity:4.0\(4\):sr1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:unity:4.0\(4\):sr1:*:*:*:*:*:*

part: a version: 4.0(4) update: sr1

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Unity (`9bda44bb-c52b-5f98-8c46-ff924075469c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-4545`	vulnerable	2026-06-08 04:50:39.229038	Details available Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory. Published: 2008-10-13T18:00:00.000Z Updated: 2024-08-07T10:17:09.861Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32187 http://www.voipshield.com/research-details.php?id=130 http://www.securityfocus.com/bid/31642 https://exchange.xforce.ibmcloud.com/vulnerabilities/45742 http://securitytracker.com/id?1021022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4543`	vulnerable	2026-06-08 04:50:39.227947	Details available Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections. Published: 2008-10-13T18:00:00.000Z Updated: 2024-08-07T10:17:09.819Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32187 https://exchange.xforce.ibmcloud.com/vulnerabilities/45743 http://securitytracker.com/id?1021013 http://www.securityfocus.com/bid/31642 http://www.vupen.com/english/advisories/2008/2771	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4542`	vulnerable	2026-06-08 04:50:39.227264	Details available Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database (aka data store). Published: 2008-10-13T18:00:00.000Z Updated: 2024-08-07T10:17:09.839Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/45744 http://www.voipshield.com/research-details.php?id=127 http://www.securityfocus.com/bid/31642 http://securitytracker.com/id?1021012 http://secunia.com/advisories/32207	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3814`	vulnerable	2026-06-08 04:50:36.563449	Details available Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specific link more than once. Published: 2008-10-08T20:44:00.000Z Updated: 2024-08-07T09:52:59.885Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32187 http://www.voipshield.com/research-details.php?id=126 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml http://www.securityfocus.com/bid/31642 http://www.securityfocus.com/bid/31638	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Unity

Notes

PURL mappings

Vulnerability references

Contribute