CVE-2014-3315
Cisco Unified Communications Manager - Cross-Site Scripting in Dialed Number Analyzer via viewfilecontents.do
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCup76308.
References (5)
Core 5
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3315
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=34900
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/68477
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59739
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/94430
Scores
EPSS
0.0116
EPSS Percentile
63.9%
Details
CWE
CWE-79
Status
published
Products (2)
cisco/unified_communications_manager
cisco/unified_communications_manager
10.0\(1\)_base
Published
Jul 10, 2014
Tracked Since
Feb 18, 2026