Improper input validation in Cisco Unified Web And E-Mail Interaction Manager

CVE-2014-2193

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.010 (57.9th percentile) — read the EPSS interpretation.