CVE-2014-3298

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-02 · updated 2026-06-17
Weakness: CWE-255

Description

Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976.

Affected products

Cisco Cloud Portal: all versions

References

http://secunia.com/advisories/58985
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3298
http://tools.cisco.com/security/center/viewAlert.x?alertId=34833
http://www.securityfocus.com/bid/68309
http://www.securitytracker.com/id/1030511
http://secunia.com/advisories/58985
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3298
http://tools.cisco.com/security/center/viewAlert.x?alertId=34833
http://www.securityfocus.com/bid/68309
http://www.securitytracker.com/id/1030511

Get alerted when CVE-2014-3298 or the next vulnerability affects your stack