CVE-2014-3320
Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks…
Does this matter?
Lower severity and a low EPSS score (2.21%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted URLs for unspecified scripts, aka Bug ID CSCuo48835.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 2.21% probability · 82th percentile
- CISA KEV
- Not listed
- Affected
- cisco/unified communications domain manager
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3320Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34960Vendor Advisory
- http://www.securityfocus.com/bid/68694Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030613Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3320Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34960Vendor Advisory
- http://www.securityfocus.com/bid/68694Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030613Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.