Lucene search

K
nvd[email protected]NVD:CVE-2014-3320
HistoryJul 18, 2014 - 12:55 a.m.

CVE-2014-3320

2014-07-1800:55:04
web.nvd.nist.gov
3

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

52.3%

Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted URLs for unspecified scripts, aka Bug ID CSCuo48835.

Affected configurations

Nvd
Node
ciscounified_communications_domain_managerRange8.1\(.4\)
OR
ciscounified_communications_domain_managerMatch8.1
OR
ciscounified_communications_domain_managerMatch8.1\(.1\)
OR
ciscounified_communications_domain_managerMatch8.1\(.2\)
OR
ciscounified_communications_domain_managerMatch8.1\(.3\)
VendorProductVersionCPE
ciscounified_communications_domain_manager*cpe:2.3:a:cisco:unified_communications_domain_manager:*:*:*:*:*:*:*:*
ciscounified_communications_domain_manager8.1cpe:2.3:a:cisco:unified_communications_domain_manager:8.1:*:*:*:*:*:*:*
ciscounified_communications_domain_manager8.1(.1)cpe:2.3:a:cisco:unified_communications_domain_manager:8.1\(.1\):*:*:*:*:*:*:*
ciscounified_communications_domain_manager8.1(.2)cpe:2.3:a:cisco:unified_communications_domain_manager:8.1\(.2\):*:*:*:*:*:*:*
ciscounified_communications_domain_manager8.1(.3)cpe:2.3:a:cisco:unified_communications_domain_manager:8.1\(.3\):*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

52.3%

Related for NVD:CVE-2014-3320