CVE-2014-3300

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-07 · updated 2026-06-17
Weakness: CWE-264

Description

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.

Affected products

Cisco Unified Cdm Application Software: through 8.1.4; 8.1
Cisco Unified Communications Domain Manager: all versions

References

http://secunia.com/advisories/59556
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689
http://www.securityfocus.com/bid/68331
http://www.securitytracker.com/id/1030515
http://secunia.com/advisories/59556
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689
http://www.securityfocus.com/bid/68331
http://www.securitytracker.com/id/1030515

Get alerted when CVE-2014-3300 or the next vulnerability affects your stack