VulnerabilityModified
CVE-2014-3350
Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL redirection, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCuh84870.
MEDIUM 4.0EPSS 1.64%
Does this matter?
Lower severity and a low EPSS score (1.64%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL redirection, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCuh84870.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 1.64% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- cisco/cloud portal
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3350Vendor Advisory
- http://www.securityfocus.com/bid/69457
- http://www.securitytracker.com/id/1030784
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95587
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3350Vendor Advisory
- http://www.securityfocus.com/bid/69457
- http://www.securitytracker.com/id/1030784
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95587
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.