{"id":"CVE-2014-2145","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-2145","generatedAt":"2026-10-27T23:19:50.194Z","title":"Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access constraints for .wav files and the audio/x-wav MIME type, aka Bug ID…","description":"Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access constraints for .wav files and the audio/x-wav MIME type, aka Bug ID CSCun91071.","published":"2014-04-05T04:01:39.000Z","lastModified":"2026-06-17T00:06:08.000Z","status":"Modified","sourceIdentifier":"psirt@cisco.com","cvss":{"version":"2.0","score":4,"severity":"MEDIUM","vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N"},"cwe":["CWE-22"],"affected":["cisco/unity connection"],"epss":{"score":0.01612,"percentile":0.75792,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.61%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2145","tags":["Vendor Advisory"],"source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/66676","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2145","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/66676","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-2145","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}