CVE-2014-3324

MEDIUM 4.3CVE-2014-3324 · Published 26/07/2014 · updated 17/06/2026

In short

CVE-2014-3324 is a MEDIUM (CVSS 4.3) vulnerability affecting telepresence server software (cisco).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
telepresence server software cisco	`= 3.0(2.24)= 3.1(1.98)= 4.0(1.57)= 4.0(2.8)`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web interface in Cisco TelePresence Server Software 4.0(2.8) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCup90060.

References

secunia.com/advisories/60456
tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3324 · Vendor Advisory
tools.cisco.com/security/center/viewAlert.x · Vendor Advisory
securityfocus.com/bid/68885 · Third Party Advisory
securitytracker.com/id/1030640 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/94847

More vulnerabilities in telepresence server software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

telepresence server software

cisco

= 3.0(2.24)= 3.1(1.98)= 4.0(1.57)= 4.0(2.8)

No fix yet

More vulnerabilities in telepresence server software

See all →