CVE-2014-3315

no score yetEPSS 1.2%

cisco unified communications manager: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCup76308.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-07-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:unified_communications_manager

References

http://secunia.com/advisories/59739
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3315
http://tools.cisco.com/security/center/viewAlert.x?alertId=34900
http://www.securityfocus.com/bid/68477
https://exchange.xforce.ibmcloud.com/vulnerabilities/94430

Check your stack JSON