Lucene search

K
cveCiscoCVE-2014-0746
HistoryFeb 27, 2014 - 1:55 a.m.

CVE-2014-0746

2014-02-2701:55:03
CWE-200
cisco
web.nvd.nist.gov
21
cisco
unified contact center express
drs
cve-2014-0746
bug id cscum95536
nvd
disaster recovery system
sensitive information

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

41.8%

The disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536.

Affected configurations

Nvd
Node
ciscounified_contact_center_express_editor_softwareMatch-
VendorProductVersionCPE
ciscounified_contact_center_express_editor_software-cpe:2.3:a:cisco:unified_contact_center_express_editor_software:-:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

41.8%

Related for CVE-2014-0746