VulnerabilityModified
CVE-2014-3349
Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410.
MEDIUM 4.0EPSS 1.63%
Does this matter?
Lower severity and a low EPSS score (1.63%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
- EPSS
- 1.63% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/cloud portal
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3349Vendor Advisory
- http://www.securityfocus.com/bid/69455
- http://www.securitytracker.com/id/1030783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95586
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3349Vendor Advisory
- http://www.securityfocus.com/bid/69455
- http://www.securitytracker.com/id/1030783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95586
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.