Vulnerabilities > Cisco > Unity Connection > 7.1

DATE CVE VULNERABILITY TITLE RISK
2012-03-01 CVE-2012-0367 Resource Management Errors vulnerability in Cisco Unity Connection
Cisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2 allows remote attackers to cause a denial of service (services crash) via a series of crafted TCP segments, aka Bug ID CSCtq67899.
network
low complexity
cisco CWE-399
7.8
2012-03-01 CVE-2012-0366 Permissions, Privileges, and Access Controls vulnerability in Cisco Unity Connection
Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.
network
low complexity
cisco CWE-264
critical
9.0