CVE-2014-3317

medium

Description

Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) allows remote authenticated users to delete arbitrary files via a crafted URL, aka Bug ID CSCup76314.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/94435

http://www.securitytracker.com/id/1030554

http://www.securityfocus.com/bid/68481

http://tools.cisco.com/security/center/viewAlert.x?alertId=34898

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3317

http://secunia.com/advisories/59727

Details

Source: Mitre, NVD

Published: 2014-07-14

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Severity: Medium

EPSS

EPSS: 0.02717