CVE-2023-40262

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting (XSS) in the administration component via Access Request.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - cve@mitre.org

Published

2024-02-08

Last modified

2025-06-17

Weaknesses

CWE-79

Affected products

• Openscape Voice Trace Manager (Unify)

References

• https://networks.unify.com/security/advisories/OBSO-2305-02.pdf