Vulnerabilities > Cisco > Unity Connection > 12.5.1.su3

DATE CVE VULNERABILITY TITLE RISK
2020-09-23 CVE-2020-3130 Improper Input Validation vulnerability in Cisco Unity Connection
A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying filesystem.
network
low complexity
cisco CWE-20
6.5
6.5
2020-01-26 CVE-2020-3129 Cross-site Scripting vulnerability in Cisco Unity Connection
A vulnerability in the web-based management interface of Cisco Unity Connection Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack.
network
low complexity
cisco CWE-79
4.8
4.8