CVE-2014-3320 — Improper Input Validation in Cisco Unified Communications Domain Manager

CWE-20 — Improper Input Validation4 documents4 sources

Severity

5.8MEDIUMNVD

EPSS

0.5%

top 32.81%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Unified Communications Domain Manager

Timeline

PublishedJul 18

Latest updateMay 17

Description

Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted URLs for unspecified scripts, aka Bug ID CSCuo48835.

CVSS vector

AV:N/AC:M/C:P/I:P/A:NExploitability: 8.6 | Impact: 4.9

Affected Packages1 packages

▶NVDcisco/unified_communications_domain_manager8.1\(.4\)+4

🔴Vulnerability Details

GHSA

GHSA-8mh2-rwr7-p739: Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8↗2022-05-17

▶

CVEList

CVE-2014-3320: Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8↗2014-07-18

▶

📋Vendor Advisories

Cisco

Cisco Unified Communications Domain Manager Admin HTTP Redirect Vulnerability↗2014-07-17

▶