Lucene search
HistoryJul 14, 2014 - 9:55 p.m.
CVE-2014-3317
cve-2014-3317
directory traversal
cisco
unified communications manager
dna component
bug id
cscup76314
nvd
5.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
61.2%
Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) allows remote authenticated users to delete arbitrary files via a crafted URL, aka Bug ID CSCup76314.
Affected configurations
Node
ciscounified_communications_managerMatch10.0\(1\)
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:unified_communications_manager | cisco unified communications manager | eq | 10.0\(1\) |
Related
prion
prion
Directory traversal
2014-07-14 21:55:00
cvelist
cvelist
CVE-2014-3317
2014-07-14 21:00:00
nvd
nvd
CVE-2014-3317
2014-07-14 21:55:05
cisco
cisco
Cisco Unified Communications Manager DNA Path Traversal Vulnerability
2014-07-10 14:13:52
5.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
61.2%
Related for CVE-2014-3317