cisco unity-connection CVE-2018-0203 is a vulnerability in Cisco Unity Connection
Published on February 22, 2018

A vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated, remote attacker to send unsolicited email messages, aka a Mail Relay Vulnerability. The vulnerability is due to improper handling of domain information in the affected software. An unauthenticated, remote attacker could exploit this vulnerability by sending crafted requests to the targeted application. A successful exploit could allow the attacker to send email messages to arbitrary addresses. Cisco Bug IDs: CSCvg62215.

NVD

Weakness Type

Data Processing Errors

Weaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.


Products Associated with CVE-2018-0203

Want to know whenever a new CVE is published for Cisco Unity Connection? stack.watch will email you.

 

Exploit Probability

EPSS
0.75%
Percentile
72.83%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.