CVE-2014-0735

中危 4.3CVE-2014-0735 · Published 20/02/2014 · updated 17/06/2026

要点

CVE-2014-0735 是影响 unified communications manager (cisco) 的中危 (CVSS 4.3)漏洞。
未来 30 天内被利用的概率（EPSS）：1.8%，高于 78.4% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
unified communications manager cisco	`= 10.0= 3.3(5)= 3.3(5)sr1= 3.3(5)sr2a= 4.1(3)= 4.1(3)sr1= 4.1(3)sr2= 4.1(3)sr3= 4.1(3)sr4= 4.2= 4.2.1= 4.2.2= 4.2.3= 4.2.3sr1= 4.2.3sr2= 4.2.3sr2b= 4.3≤ 10.0\(1\)`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0735 · Vendor Advisory
tools.cisco.com/security/center/viewAlert.x · Vendor Advisory
securityfocus.com/bid/65641
securitytracker.com/id/1029793

unified communications manager 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unified communications manager

cisco

= 10.0= 3.3(5)= 3.3(5)sr1= 3.3(5)sr2a= 4.1(3)= 4.1(3)sr1= 4.1(3)sr2= 4.1(3)sr3= 4.1(3)sr4= 4.2= 4.2.1= 4.2.2= 4.2.3= 4.2.3sr1= 4.2.3sr2= 4.2.3sr2b= 4.3≤ 10.0\(1\)

No fix yet

unified communications manager 的其他漏洞

查看全部 →