CVE-2014-3315 — Cross-site Scripting in Cisco Unified Communications Manager

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.4%
top 42.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Unified Communications Manager
Timeline
PublishedJul 10
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCup76308.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-jp2p-j744-7xw3: Cross-site scripting (XSS) vulnerability in viewfilecontents↗2022-05-17
▶
CVEList
CVE-2014-3315: Cross-site scripting (XSS) vulnerability in viewfilecontents↗2014-07-10
▶

📋Vendor Advisories

1
Cisco
Cisco Unified Communications Manager DNA Cross-Site Scripting Vulnerability↗2014-07-10
▶
CVE-2014-3315 — Cross-site Scripting in Cisco | cvebase