CVE

Id
70670  
CVE No.
CVE-2014-3374  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the CCM admin interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90582.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671786 70670 CVE-2014-3374 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=36295  View
671787 70670 CVE-2014-3374 CISCO:20141030 Cisco Unified Communications Manager Admin Interface Reflected Cross-Site Scripting Vulnerability  View
671788 70670 CVE-2014-3374 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3374  View
671789 70670 CVE-2014-3374 BID:70849  View
671790 70670 CVE-2014-3374 URL:http://www.securityfocus.com/bid/70849  View
671791 70670 CVE-2014-3374 SECTRACK:1031162  View
671792 70670 CVE-2014-3374 URL:http://www.securitytracker.com/id/1031162  View
671793 70670 CVE-2014-3374 SECUNIA:59696  View
671794 70670 CVE-2014-3374 URL:http://secunia.com/advisories/59696  View
671795 70670 CVE-2014-3374 XF:cisco-ucm-cve20143374-xss(98407)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15781 JVNDB-2014-004656 Cisco ASA ソフトウェアの SQL*Net インスペクションエンジンにおけるサービス運用妨害 (DoS) の脆弱性 Cisco ASA ソフトウェアの SQL*Net インスペクションエンジンには、サービス運用妨害 (デバイスリロード) 状態にされる脆弱性が存在します。 CVE-2014-3382 70670 7.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004656.html  View