VULNERABILITY INTELLIGENCE

CVE-2014-3333

CVSS score9 HIGH
EPSS probability3.13%
CISA KEVNot currently listed
Published2014-08-11
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.

Primary references