CVE-2014-7988

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-11-07 · updated 2026-06-17
Weakness: CWE-200

Description

The Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCur06493.

Affected products

Cisco Unity Connection: through 10.5

References

http://secunia.com/advisories/62106
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7988
http://tools.cisco.com/security/center/viewAlert.x?alertId=36340
http://www.securitytracker.com/id/1031177
https://exchange.xforce.ibmcloud.com/vulnerabilities/98493
http://secunia.com/advisories/62106
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7988
http://tools.cisco.com/security/center/viewAlert.x?alertId=36340
http://www.securitytracker.com/id/1031177
https://exchange.xforce.ibmcloud.com/vulnerabilities/98493

Get alerted when CVE-2014-7988 or the next vulnerability affects your stack