CVE-2014-3301

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-26 · updated 2026-06-17
Weakness: CWE-200

Description

The ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned messages, aka Bug ID CSCuj81700.

Affected products

Cisco WebEx Meetings Server: through 1.5\(.1.131\); 1.5, 1.5(.1.6)

References

http://secunia.com/advisories/60573
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3301
http://tools.cisco.com/security/center/viewAlert.x?alertId=35040
http://www.securityfocus.com/bid/68894
http://www.securitytracker.com/id/1030642
https://exchange.xforce.ibmcloud.com/vulnerabilities/94895
http://secunia.com/advisories/60573
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3301
http://tools.cisco.com/security/center/viewAlert.x?alertId=35040
http://www.securityfocus.com/bid/68894
http://www.securitytracker.com/id/1030642
https://exchange.xforce.ibmcloud.com/vulnerabilities/94895

Get alerted when CVE-2014-3301 or the next vulnerability affects your stack