CVE-2008-4542

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-10-13 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database (aka data store).

Affected products

Cisco Unity: through 4.2\(1\); through 5.0\(1\); through 7.0\(2\); 4.0, 4.0(1), 4.0(2), 4.0(3), 4.0(3)-sr2, 4.0(4) (+5)

References

http://secunia.com/advisories/32207
http://securitytracker.com/id?1021012
http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html
http://www.securityfocus.com/bid/31642
http://www.voipshield.com/research-details.php?id=127
http://www.vupen.com/english/advisories/2008/2771
https://exchange.xforce.ibmcloud.com/vulnerabilities/45744
http://secunia.com/advisories/32207
http://securitytracker.com/id?1021012
http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html
http://www.securityfocus.com/bid/31642
http://www.voipshield.com/research-details.php?id=127

Get alerted when CVE-2008-4542 or the next vulnerability affects your stack