CVE-2014-2145

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-05 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access constraints for .wav files and the audio/x-wav MIME type, aka Bug ID CSCun91071.

Affected products

Cisco Unity Connection: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2145
http://www.securityfocus.com/bid/66676
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2145
http://www.securityfocus.com/bid/66676

Get alerted when CVE-2014-2145 or the next vulnerability affects your stack