CVE-2008-4542

Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database (aka data store).

Link	Resource
http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html	Vendor Advisory
http://www.voipshield.com/research-details.php?id=127
http://securitytracker.com/id?1021012
http://www.securityfocus.com/bid/31642
http://secunia.com/advisories/32207	Vendor Advisory
http://www.vupen.com/english/advisories/2008/2771
https://exchange.xforce.ibmcloud.com/vulnerabilities/45744

Configuration 1

cpe:2.3:a:cisco:unity:5.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:unity:4.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:unity:4.0(4):sr1:*:*:*:*:*:* cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:unity:4.0(3):*:*:*:*:*:*:* cpe:2.3:a:cisco:unity:4.1(1):*:*:*:*:*:*:* cpe:2.3:a:cisco:unity:4.0(2):*:*:*:*:*:*:* cpe:2.3:a:cisco:unity:4.0(5):*:*:*:*:*:*:* cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:unity:4.0(4):*:*:*:*:*:*:* cpe:2.3:a:cisco:unity:4.0(3):sr2:*:*:*:*:*:* cpe:2.3:a:cisco:unity:7.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:unity:4.0(1):*:*:*:*:*:*:*

---

Published : 2008-10-13 08:00

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-4542

Mitre link : CVE-2008-4542

No products.

CWE-79