CVE-2014-3300
high · 7.5The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.
7.5
CVSS
21.9%
EPSS (exploit prob.)
98th
EPSS percentile
2014-07-07
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | unified_cdm_application_software | <= 8.1.4 |
| cisco | unified_cdm_application_software | 8.1 |
| cisco | unified_communications_domain_manager | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/59556
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
- http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689
- http://www.securityfocus.com/bid/68331
- http://www.securitytracker.com/id/1030515
- http://secunia.com/advisories/59556
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
- http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689
- http://www.securityfocus.com/bid/68331
- http://www.securitytracker.com/id/1030515
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2014-3300