VulnerabilityModified
CVE-2014-7988
The Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCur06493.
MEDIUM 4.0EPSS 1.64%
Does this matter?
Lower severity and a low EPSS score (1.64%). Track it; it rarely justifies an emergency change on its own.
Description
The Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCur06493.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 1.64% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- cisco/unity connection
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/62106
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7988Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36340Vendor Advisory
- http://www.securitytracker.com/id/1031177
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98493
- http://secunia.com/advisories/62106
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7988Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36340Vendor Advisory
- http://www.securitytracker.com/id/1031177
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98493
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.