CVE-2014-3363

no score yetEPSS 1.5%

cisco unified communications manager: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Manager (UCM) 9.1(2.10000.28) allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuq68443.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-09-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:unified_communications_manager

References

http://secunia.com/advisories/59105
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3363
http://tools.cisco.com/security/center/viewAlert.x?alertId=35672
http://www.securityfocus.com/bid/69739
http://www.securitytracker.com/id/1030836

Check your stack JSON