CVE-2013-1114 Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527.
MediumCVSS 4.3
EPSS 10.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unity express software | <= 7.4 | No fix listed |
| cisco unity express software | = 1.1.1 | No fix listed |
| cisco unity express software | = 1.1.2 | No fix listed |
| cisco unity express software | = 2.0 | No fix listed |
| cisco unity express software | = 2.1 | No fix listed |
| cisco unity express software | = 2.1.1 | No fix listed |
| cisco unity express software | = 2.1.2 | No fix listed |
| cisco unity express software | = 2.2 | No fix listed |
| cisco unity express software | = 2.2.2 | No fix listed |
| cisco unity express software | = 2.3 | No fix listed |
| cisco unity express software | = 3.0 | No fix listed |
| cisco unity express software | = 3.1 | No fix listed |
| cisco unity express software | = 3.2 | No fix listed |
| cisco unity express software | = 7.0 | No fix listed |
| cisco unity express software | = 7.1 | No fix listed |
| cisco unity express software | = 7.2 | No fix listed |
| cisco unity express software | = 7.3 | No fix listed |