GCVE - cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Unity (`9bda44bb-c52b-5f98-8c46-ff924075469c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-4545`	vulnerable	2026-06-08 04:50:39.228911	Details available Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory. Published: 2008-10-13T18:00:00.000Z Updated: 2024-08-07T10:17:09.861Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32187 http://www.voipshield.com/research-details.php?id=130 http://www.securityfocus.com/bid/31642 https://exchange.xforce.ibmcloud.com/vulnerabilities/45742 http://securitytracker.com/id?1021022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4544`	vulnerable	2026-06-08 04:50:39.228494	Details available Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error." Published: 2008-10-13T18:00:00.000Z Updated: 2024-08-07T10:17:10.069Z Open on db.gcve.eu Reference links http://www.voipshield.com/research-details.php?id=129 http://www.securityfocus.com/bid/31642 https://exchange.xforce.ibmcloud.com/vulnerabilities/45746 http://www.vupen.com/english/advisories/2008/2771 http://securitytracker.com/id?1021020	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4543`	vulnerable	2026-06-08 04:50:39.227819	Details available Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections. Published: 2008-10-13T18:00:00.000Z Updated: 2024-08-07T10:17:09.819Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32187 https://exchange.xforce.ibmcloud.com/vulnerabilities/45743 http://securitytracker.com/id?1021013 http://www.securityfocus.com/bid/31642 http://www.vupen.com/english/advisories/2008/2771	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4542`	vulnerable	2026-06-08 04:50:39.225937	Details available Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database (aka data store). Published: 2008-10-13T18:00:00.000Z Updated: 2024-08-07T10:17:09.839Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/45744 http://www.voipshield.com/research-details.php?id=127 http://www.securityfocus.com/bid/31642 http://securitytracker.com/id?1021012 http://secunia.com/advisories/32207	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Unity

Notes

PURL mappings

Vulnerability references

Contribute