CVE-2014-0733

no score yetEPSS 1.8%

The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a URL, aka Bug ID CSCum46494.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2014-02-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:unified_communications_manager

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0733
http://tools.cisco.com/security/center/viewAlert.x?alertId=32914
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0733
http://tools.cisco.com/security/center/viewAlert.x?alertId=32914

Check your stack JSON