CVE-2020-3129

CVE-2020-3129 describes a stored cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco Unity Connection Software. An authenticated, remote attacker could exploit insufficient input validation by injecting crafted data into a specific field. This would result in the execution of malicious scripts when other users view the compromised data. The vulnerability has a CVSS score of 4.8 (Medium), indicating that an attacker with high privileges (PR:H) could trigger the XSS via a network vector (AV:N) with low attack complexity (AC:L), leading to low impact on confidentiality (C:L) and integrity (I:L). User interaction (UI:R) is required for successful exploitation. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE. Its EPSS score is very low, suggesting a minimal likelihood of exploitation in the wild.