CVE-2014-3324

MITTEL 4.3CVE-2014-3324 · Published 26/07/2014 · updated 17/06/2026

Kurz gesagt

CVE-2014-3324 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in telepresence server software (cisco).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.5%, höher als bei 74.2% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
telepresence server software cisco	`= 3.0(2.24)= 3.1(1.98)= 4.0(1.57)= 4.0(2.8)`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web interface in Cisco TelePresence Server Software 4.0(2.8) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCup90060.

References

secunia.com/advisories/60456
tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3324 · Vendor Advisory
tools.cisco.com/security/center/viewAlert.x · Vendor Advisory
securityfocus.com/bid/68885 · Third Party Advisory
securitytracker.com/id/1030640 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/94847

Weitere Schwachstellen in telepresence server software

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

telepresence server software

cisco

= 3.0(2.24)= 3.1(1.98)= 4.0(1.57)= 4.0(2.8)

No fix yet

Weitere Schwachstellen in telepresence server software

Alle anzeigen →