CVE-2014-0731

MEDIO 5.0CVE-2014-0731 · Published 22/02/2014 · updated 17/06/2026

In breve

CVE-2014-0731 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda unified communications manager (cisco).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 79.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
unified communications manager cisco	`= 10.0= 3.3(5)= 3.3(5)sr1= 3.3(5)sr2a= 4.1(3)= 4.1(3)sr1= 4.1(3)sr2= 4.1(3)sr3= 4.1(3)sr4= 4.2= 4.2.1= 4.2.2= 4.2.3= 4.2.3sr1= 4.2.3sr2= 4.2.3sr2b= 4.3≤ 10.0\(1\)`	No fix yet

Description

The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0731 · Vendor Advisory
tools.cisco.com/security/center/viewAlert.x · Vendor Advisory

Altre vulnerabilità di unified communications manager

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unified communications manager

cisco

= 10.0= 3.3(5)= 3.3(5)sr1= 3.3(5)sr2a= 4.1(3)= 4.1(3)sr1= 4.1(3)sr2= 4.1(3)sr3= 4.1(3)sr4= 4.2= 4.2.1= 4.2.2= 4.2.3= 4.2.3sr1= 4.2.3sr2= 4.2.3sr2b= 4.3≤ 10.0\(1\)

No fix yet

Altre vulnerabilità di unified communications manager

Vedi tutto →