Cisco Unity Connection Internet Message Access Protocol Denial of Service Vulnerability

A vulnerability in the Internet Message Access Protocol IMAP function of Cisco Unity Connection could allow an authenticated, remote attacker to cause 100 percent CPU utilization on the Cisco Unity Connection server, which may cause a denial of service DoS condition. The vulnerability is due to t...

CVE-2014-0664

The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service CPU consumption via unspecified IMAP commands, aka Bug ID CSCul49976...

Code injection

The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service CPU consumption via unspecified IMAP commands, aka Bug ID CSCul49976...

CVE-2014-0664

The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service CPU consumption via unspecified IMAP commands, aka Bug ID CSCul49976...

CVE-2013-5534

Directory traversal vulnerability in the attachment service in the Voice Message Web Service aka VMWS or Cisco Unity Web Service in Cisco Unity Connection allows remote authenticated users to create files, and consequently execute arbitrary JSP code, via a crafted pathname for a file that is not ...

Directory traversal

Directory traversal vulnerability in the attachment service in the Voice Message Web Service aka VMWS or Cisco Unity Web Service in Cisco Unity Connection allows remote authenticated users to create files, and consequently execute arbitrary JSP code, via a crafted pathname for a file that is not ...

Cisco Unity Connection Directory Traversal Vulnerability

A vulnerability in the attachment service of Cisco Unity Connection, known as Cisco Unity Web Service or as Voice Message Web Service VMWS, could allow an authenticated, remote attacker to place files in arbitrary locations on an affected device. The vulnerability is due to a failure to properly...

Cisco Unity Connection Version

Cisco Unity Connection was found. TRUSTED...

Cisco Unity Connection Administrator Password Bypass (cisco-sa-20120229-cuc)

Cisco Unity Connection before 7.1.3bSu2 / 7.1.5 allows remote, authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70197; scriptversion"1.6";...

Cisco Unity Connection Remote Denial of Service (cisco-sa-20120229-cuc)

Cisco Unity Connection before 7.1.5bSu5, 8.0, 8.5 before 8.5.1Su3, and 8.6 before 8.6.2 allows remote attackers to cause a denial of service services crash via a series of crafted TCP segments, aka Bug ID CSCtq67899. C Tenable Network Security, Inc. include"compat.inc"; if description...

Cisco Unity Detection

The remote host has Cisco Unity installed. Cisco Unity is communication integration software that bridges phone systems to email. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70169; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Cisco Unity Remote Administration Authentication Bypass (cisco-sa-20081008-unity)

According to its self-reported version number, the installation of Cisco Unity on the remote host may be affected by an authentication bypass vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. Additionally,...

CVE-2013-1129

Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service memory consumption and process crash by sending many TCP requests, aka Bug ID CSCud59736...

Memory corruption

Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service memory consumption and process crash by sending many TCP requests, aka Bug ID CSCud59736...

CVE-2013-1129

Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service memory consumption and process crash by sending many TCP requests, aka Bug ID CSCud59736...

Cisco Unity Connection Memory Leak Denial of Service Vulnerability

Cisco Unity Connection contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to the improper handling of user-supplied requests by the affected software. An unauthenticated, remote attacker could exploit...

CVE-2013-1114

Multiple cross-site scripting XSS vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527...

EUVD-2013-1154

Multiple cross-site scripting XSS vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527...

CVE-2013-1114

Cisco Unity Express (Cisco Unity Express) affected by XSS vulnerabilities (CVE-2013-1114) in versions before 8.0. Attack vector is not fully specified in the provided documents; remote attacker can inject arbitrary web script or HTML via web interface. Root cause is described as cross-site script...