VulnerabilityModified
CVE-2014-3317
Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) allows remote authenticated users to delete arbitrary files via a crafted URL, aka Bug ID CSCup76314.
MEDIUM 5.5EPSS 2.56%
Does this matter?
Lower severity and a low EPSS score (2.56%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) allows remote authenticated users to delete arbitrary files via a crafted URL, aka Bug ID CSCup76314.
- CVSS 2.0
- 5.5 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P
- EPSS
- 2.56% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- cisco/unified communications manager
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/59727
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3317Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34898Vendor Advisory
- http://www.securityfocus.com/bid/68481
- http://www.securitytracker.com/id/1030554
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94435
- http://secunia.com/advisories/59727
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3317Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34898Vendor Advisory
- http://www.securityfocus.com/bid/68481
- http://www.securitytracker.com/id/1030554
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94435
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.