Vulnerabilities > Unify

DATE CVE VULNERABILITY TITLE RISK
2017-09-25 CVE-2015-8251 Information Exposure vulnerability in Unify products
OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScape Desk Phone IP 35G Eco HFA V3 use non-unique X.509 certificates and SSH host keys.
network
high complexity
unify CWE-200
5.9
2000-06-08 CVE-2000-0498 Improper Handling of Case Sensitivity vulnerability in Unify Ewave Servletexec
Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
network
low complexity
unify CWE-178
7.5