CVEvulnerability
CVE-2014-3373
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-10-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the CCM Dialed Number Analyzer interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCup92550.
Affected configurations
• cisco unified communications manager
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/59692 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3373 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36294 Vendor Advisory
- http://www.securityfocus.com/bid/70848 www.securityfocus.com
- http://www.securitytracker.com/id/1031161 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98406 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/59692 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3373 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36294 Vendor Advisory
- http://www.securityfocus.com/bid/70848 www.securityfocus.com
- http://www.securitytracker.com/id/1031161 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98406 exchange.xforce.ibmcloud.com