← Vulnerability feed

Vulnerability record · CVE-2004-1322 · published 15 December 2004

CVE-2004-1322: Cisco unity server vulnerability

Cisco · Unity Server

Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.

7.5 CVSS 2.0 High EPSS 2.5% · top 16.2%
7.5CVSS 2.0 base score
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.ciac.org/ciac/bulletins/p-060.shtml PatchVendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20041215-unity.shtml PatchVendor Advisory
http://www.securityfocus.com/bid/11954 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18489
http://www.ciac.org/ciac/bulletins/p-060.shtml PatchVendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20041215-unity.shtml PatchVendor Advisory
http://www.securityfocus.com/bid/11954 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18489

Track CVE-2004-1322 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2002-1190Cisco unity server vulnerabilityCisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.EPSS 1.6%5.0CVE-2005-0356TCP PAWS timestamp handling allows remote connection lossMultiple TCP implementations that enable the timestamps option with Protection Against Wrapped Sequence Numbers (PAWS) can be forced to discard valid…EPSS 83%analysed4.6CVE-2002-1189Cisco unity server vulnerabilityThe default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could al…EPSS 0.35%

Source: NIST National Vulnerability Database (record CVE-2004-1322), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.