CVE-2014-2194

Cisco’s advisory CVE-2014-2194 affects Cisco Unified Web and E-mail Interaction Manager 9.0(2). The vulnerability is in the /system/egain/chat/entrypoint script, allowing unauthenticated, remote attackers to inject spoofed XML external entities due to inadequate input validation. Impact is descri...

CVE-2014-2194

system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity...