Lucene search

K
nvd[email protected]NVD:CVE-2014-2194
HistoryMay 20, 2014 - 11:13 a.m.

CVE-2014-2194

2014-05-2011:13:37
CWE-20
web.nvd.nist.gov
3

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

72.0%

system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity.

Affected configurations

Nvd
Node
ciscounified_web_and_e-mail_interaction_managerMatch9.0\(2\)
VendorProductVersionCPE
ciscounified_web_and_e-mail_interaction_manager9.0(2)cpe:2.3:a:cisco:unified_web_and_e-mail_interaction_manager:9.0\(2\):*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

72.0%

Related for NVD:CVE-2014-2194