var-200707-0302
Vulnerability from variot
Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka (1) CSCsj20668 and (2) CSCsj25962. To exploit this issue, an attacker must have administrative access. Attackers may exploit these issues to gain access to sensitive information or to cause denial-of-service conditions.
Try a new way to discover vulnerabilities that ALREADY EXIST in your IT infrastructure.
The Full Featured Secunia Network Software Inspector (NSI) is now available: http://secunia.com/network_software_inspector/
The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT vulnerabilities in more than 4,000 different Windows applications.
The vulnerabilities are caused due to unspecified errors and can be exploited by an unauthorized administrator to e.g. activate and terminate system services or to view SNMP configuration information in a CUCM/CUPS cluster environment.
CUCM 5.0/5.1: Update to CUCM 5.1(2a) - http://www.cisco.com/pcgi-bin/tablebuild.pl/callmgr-51?psrtdcat20e2
CUPS 1.0: Upgrade to CUPS 6.0(1) - http://www.cisco.com/pcgi-bin/tablebuild.pl/cups-60?psrtdcat20e2 Version 1.0 is reportedly discontinued. The vendor recommends users to upgrade to version 6.
PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.
ORIGINAL ADVISORY: http://www.cisco.com/warp/public/707/cisco-sa-20070711-voip.shtml
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-200707-0302", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "unified presence server", "scope": "eq", "trust": 1.9, "vendor": "cisco", "version": "1.0" }, { "model": "unified presence server", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.0\\(2\\)" }, { "model": "unified presence server", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.0\\(1\\)" }, { "model": "unified communications manager", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "5.1\\(1\\)" }, { "model": "unified communications manager", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "5.1\\(2\\)" }, { "model": "unified presence server", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.0\\(3\\)" }, { "model": "unified communications manager", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "5.0" }, { "model": "unified communications manager", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "unified presence server", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "unified presence server", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "1.0(3)" }, { "model": "unified presence server", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "1.0(2)" }, { "model": "unified communications manager", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "5.1(1)" }, { "model": "unified callmanager", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "5.0" }, { "model": "unified presence server", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "6.0" }, { "model": "unified communications manager 5.1", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": null }, { "model": "unified communications manager 4.3 sr.1", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": null }, { "model": "unified callmanager", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "6.0" }, { "model": "unified callmanager", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "4.2" }, { "model": "unified callmanager", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "4.1" }, { "model": "unified callmanager", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "4.0" }, { "model": "unified callmanager", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "3.3" } ], "sources": [ { "db": "BID", "id": "24867" }, { "db": "JVNDB", "id": "JVNDB-2007-002348" }, { "db": "NVD", "id": "CVE-2007-3776" }, { "db": "CNNVD", "id": "CNNVD-200707-241" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:cisco:unified_presence_server:1.0\\(3\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_presence_server:1.0\\(1\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_presence_server:1.0\\(2\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(1\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_presence_server:1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2007-3776" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco Security bulletin", "sources": [ { "db": "CNNVD", "id": "CNNVD-200707-241" } ], "trust": 0.6 }, "cve": "CVE-2007-3776", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 10.0, "impactScore": 2.9, "integrityImpact": "NONE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "None", "baseScore": 5.0, "confidentialityImpact": "Partial", "exploitabilityScore": null, "id": "CVE-2007-3776", "impactScore": null, "integrityImpact": "None", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "Medium", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 10.0, "id": "VHN-27138", "impactScore": 2.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:N/AC:L/AU:N/C:P/I:N/A:N", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "NVD", "id": "CVE-2007-3776", "trust": 1.8, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-200707-241", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-27138", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-27138" }, { "db": "JVNDB", "id": "JVNDB-2007-002348" }, { "db": "NVD", "id": "CVE-2007-3776" }, { "db": "CNNVD", "id": "CNNVD-200707-241" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka (1) CSCsj20668 and (2) CSCsj25962. \nTo exploit this issue, an attacker must have administrative access. \nAttackers may exploit these issues to gain access to sensitive information or to cause denial-of-service conditions. \n\n----------------------------------------------------------------------\n\nTry a new way to discover vulnerabilities that ALREADY EXIST in your\nIT infrastructure. \n\nThe Full Featured Secunia Network Software Inspector (NSI) is now\navailable:\nhttp://secunia.com/network_software_inspector/\n\nThe Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT\nvulnerabilities in more than 4,000 different Windows applications. \n\nThe vulnerabilities are caused due to unspecified errors and can be\nexploited by an unauthorized administrator to e.g. activate and\nterminate system services or to view SNMP configuration information\nin a CUCM/CUPS cluster environment. \n\nCUCM 5.0/5.1:\nUpdate to CUCM 5.1(2a) -\nhttp://www.cisco.com/pcgi-bin/tablebuild.pl/callmgr-51?psrtdcat20e2\n\nCUPS 1.0:\nUpgrade to CUPS 6.0(1) -\nhttp://www.cisco.com/pcgi-bin/tablebuild.pl/cups-60?psrtdcat20e2\nVersion 1.0 is reportedly discontinued. The vendor recommends users\nto upgrade to version 6. \n\nPROVIDED AND/OR DISCOVERED BY:\nReported by the vendor. \n\nORIGINAL ADVISORY:\nhttp://www.cisco.com/warp/public/707/cisco-sa-20070711-voip.shtml\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n", "sources": [ { "db": "NVD", "id": "CVE-2007-3776" }, { "db": "JVNDB", "id": "JVNDB-2007-002348" }, { "db": "BID", "id": "24867" }, { "db": "VULHUB", "id": "VHN-27138" }, { "db": "PACKETSTORM", "id": "57688" } ], "trust": 2.07 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2007-3776", "trust": 2.8 }, { "db": "BID", "id": "24867", "trust": 2.0 }, { "db": "SECUNIA", "id": "26039", "trust": 1.8 }, { "db": "VUPEN", "id": "ADV-2007-2511", "trust": 1.7 }, { "db": "SECTRACK", "id": "1018368", "trust": 1.7 }, { "db": "OSVDB", "id": "36124", "trust": 1.1 }, { "db": "JVNDB", "id": "JVNDB-2007-002348", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-200707-241", "trust": 0.7 }, { "db": "XF", "id": "35344", "trust": 0.6 }, { "db": "CISCO", "id": "20070711 CISCO UNIFIED COMMUNICATIONS MANAGER AND PRESENCE SERVER UNAUTHORIZED ACCESS VULNERABILITIES", "trust": 0.6 }, { "db": "VULHUB", "id": "VHN-27138", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "57688", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-27138" }, { "db": "BID", "id": "24867" }, { "db": "JVNDB", "id": "JVNDB-2007-002348" }, { "db": "PACKETSTORM", "id": "57688" }, { "db": "NVD", "id": "CVE-2007-3776" }, { "db": "CNNVD", "id": "CNNVD-200707-241" } ] }, "id": "VAR-200707-0302", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-27138" } ], "trust": 0.01 }, "last_update_date": "2023-12-18T12:12:32.277000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "cisco-sa-20070711-voip", "trust": 0.8, "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20070711-voip" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2007-002348" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "NVD-CWE-Other", "trust": 1.0 } ], "sources": [ { "db": "NVD", "id": "CVE-2007-3776" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.1, "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070711-voip.shtml" }, { "trust": 1.7, "url": "http://www.securityfocus.com/bid/24867" }, { "trust": 1.7, "url": "http://securitytracker.com/id?1018368" }, { "trust": 1.7, "url": "http://secunia.com/advisories/26039" }, { "trust": 1.1, "url": "http://osvdb.org/36124" }, { "trust": 1.1, "url": "http://www.vupen.com/english/advisories/2007/2511" }, { "trust": 1.1, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35344" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-3776" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-3776" }, { "trust": 0.6, "url": "http://xforce.iss.net/xforce/xfdb/35344" }, { "trust": 0.6, "url": "http://www.frsirt.com/english/advisories/2007/2511" }, { "trust": 0.3, "url": "http://www.cisco.com/" }, { "trust": 0.3, "url": "/archive/1/473379" }, { "trust": 0.1, "url": "http://secunia.com/secunia_security_advisories/" }, { "trust": 0.1, "url": "http://secunia.com/network_software_inspector/" }, { "trust": 0.1, "url": "http://secunia.com/product/12535/" }, { "trust": 0.1, "url": "http://www.cisco.com/pcgi-bin/tablebuild.pl/cups-60?psrtdcat20e2" }, { "trust": 0.1, "url": "http://secunia.com/product/11019/" }, { "trust": 0.1, "url": "http://www.cisco.com/pcgi-bin/tablebuild.pl/callmgr-51?psrtdcat20e2" }, { "trust": 0.1, "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org" }, { "trust": 0.1, "url": "http://secunia.com/about_secunia_advisories/" }, { "trust": 0.1, "url": "http://secunia.com/product/12424/" }, { "trust": 0.1, "url": "http://secunia.com/advisories/26039/" } ], "sources": [ { "db": "VULHUB", "id": "VHN-27138" }, { "db": "BID", "id": "24867" }, { "db": "JVNDB", "id": "JVNDB-2007-002348" }, { "db": "PACKETSTORM", "id": "57688" }, { "db": "NVD", "id": "CVE-2007-3776" }, { "db": "CNNVD", "id": "CNNVD-200707-241" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULHUB", "id": "VHN-27138" }, { "db": "BID", "id": "24867" }, { "db": "JVNDB", "id": "JVNDB-2007-002348" }, { "db": "PACKETSTORM", "id": "57688" }, { "db": "NVD", "id": "CVE-2007-3776" }, { "db": "CNNVD", "id": "CNNVD-200707-241" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2007-07-15T00:00:00", "db": "VULHUB", "id": "VHN-27138" }, { "date": "2007-07-11T00:00:00", "db": "BID", "id": "24867" }, { "date": "2012-06-26T00:00:00", "db": "JVNDB", "id": "JVNDB-2007-002348" }, { "date": "2007-07-13T00:55:11", "db": "PACKETSTORM", "id": "57688" }, { "date": "2007-07-15T22:30:00", "db": "NVD", "id": "CVE-2007-3776" }, { "date": "2007-07-15T00:00:00", "db": "CNNVD", "id": "CNNVD-200707-241" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2017-07-29T00:00:00", "db": "VULHUB", "id": "VHN-27138" }, { "date": "2016-07-06T14:17:00", "db": "BID", "id": "24867" }, { "date": "2012-06-26T00:00:00", "db": "JVNDB", "id": "JVNDB-2007-002348" }, { "date": "2017-07-29T01:32:32.130000", "db": "NVD", "id": "CVE-2007-3776" }, { "date": "2007-07-17T00:00:00", "db": "CNNVD", "id": "CNNVD-200707-241" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-200707-241" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "CUCM Vulnerability in which important information is obtained", "sources": [ { "db": "JVNDB", "id": "JVNDB-2007-002348" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "lack of information", "sources": [ { "db": "CNNVD", "id": "CNNVD-200707-241" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.