Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-3320

Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted URLs for unspecified scripts, aka Bug ID CSCuo48835.

Published

2014-07-18T00:55:04.877

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

4.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco unified_communications_domain_manager ≤ 8.1\(.4\) Yes
Application cisco unified_communications_domain_manager 8.1 Yes
Application cisco unified_communications_domain_manager 8.1\(.1\) Yes
Application cisco unified_communications_domain_manager 8.1\(.2\) Yes
Application cisco unified_communications_domain_manager 8.1\(.3\) Yes
References