CSCvw14143 - Upgrade Jetty Running on Port 7080

[Roland.Schmidt]

Hi,

So I'm a little confused. Which statement is correct here?

„These bugs were opened proactively to investigate potential security impact(s) on the product. At this time, the product is not confirmed to be affected by any of the CVE(s).”

or

Known Affected Releases:

12.5(1.129)

Our Qualis Scan finds this vulnerability in the system. Can someone tell if we are affected or not?

we are running on

Cisco Unity Connection

Version 12.5.1.13900-35

best regards

Roland

[BiaMeslin]

Seems my customer is facing that also and the bug tool mentioned the version CUC.12.5(1.14900.27) has the fix, but this is not available for download on cisco.com (CUC_12.5.1.14900-45)

Anyone can point us to the correct/available version with the fix for 12.5.1.x?

Known Fixed Releases: (8)
CUC.14.0(0.97000.642)
CUC.14.0(0.97000.589)
CUC.14.0(0.96100.13)
CUC.12.5(1.14900.27)
14.0(0.264)
14.0(0.243)
12.5(1.225)
12.5(1)ES22