CVEvulnerability
CVE-2014-3315
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCup76308.
Affected configurations
• cisco unified communications manager
• cisco unified communications manager 10.0\(1\) base
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/59739 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3315 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34900 Vendor Advisory
- http://www.securityfocus.com/bid/68477 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94430 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/59739 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3315 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34900 Vendor Advisory
- http://www.securityfocus.com/bid/68477 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94430 exchange.xforce.ibmcloud.com