4 matches found
CVE-2025-20015: Uncontrolled Search Path Element
Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-3129: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Unity Connection Software could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker...
PT-2020-1436
Name of the Vulnerable Software and Affected Versions Cisco Unity Connection Software affected versions not specified Description The issue is related to insufficient input validation in the web-based management interface, which could allow a remote attacker to perform a stored cross-site scripti...
