CVEvulnerability
CVE-2014-2117
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
Multiple open redirect vulnerabilities in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters, aka Bug ID CSCun37909.
Affected configurations
• cisco emergency responder (<= 8.6)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2117 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33642 Vendor Advisory
- http://www.securityfocus.com/bid/66634 www.securityfocus.com
- http://www.securitytracker.com/id/1030019 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2117 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33642 Vendor Advisory
- http://www.securityfocus.com/bid/66634 www.securityfocus.com
- http://www.securitytracker.com/id/1030019 www.securitytracker.com