CVE-2014-3326

no score yetEPSS 2.1%

SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCup26957.

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2014-07-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:security_manager

References

http://secunia.com/advisories/60455
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3326
http://tools.cisco.com/security/center/viewAlert.x?alertId=35029
http://www.securityfocus.com/bid/68877
http://www.securitytracker.com/id/1030639

Check your stack JSON