VULNERABILITY INTELLIGENCE
CVE-2014-3283
CVSS score5.8 MEDIUM
EPSS probability2.21%
CISA KEVNot currently listed
Published2014-05-29
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N
Description
Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID CSCun79731.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- psirt@cisco.com — Permissions Required
- psirt@cisco.com — Vendor Advisory
- psirt@cisco.com — Vendor Advisory
- psirt@cisco.com — Third Party Advisory, VDB Entry
- psirt@cisco.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry