Unscored severity · published Feb 13, 2013
CVE-2013-1114
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka…
–
CVSS
10.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UE
Unity Express Software · Cisco
through 7.4; 1.1.1; 1.1.2; 2.0; 2.1; 2.1.1; +11 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1114
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1114
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1114
More from Unity Express Software
–
CVE-2013-1120
Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software before 8.0 allow remote attackers to hijack the authentication of unspecified…
–
CVE-2006-2166
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network…