Cisco Unity Express Software — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Unity Express Software, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2013-1120 — CVSS 6.8 (medium): Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software before 8.0 allow remote attackers to…
• CVE-2013-1114 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script…
• CVE-2006-2166 — CVSS 2.1 (low): Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE…