Improper input validation in Cisco Unified Communications Domain Manager
CVE-2014-3283
Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID CSCun79731.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_communications_domain_manager — versions 7.4, 8.6, 8.6\(.2\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (Permissions Required, x_refsource_SECUNIA, third-party-advisory)