CVE-2020-3129: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unity Connection Software could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker...

PT-2020-1436

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection Software affected versions not specified Description The issue is related to insufficient input validation in the web-based management interface, which could allow a remote attacker to perform a stored cross-site scripti...