CVE-2014-2145: Cisco Unity Connection

Medium severity, CVSS 4.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access constraints for .wav files and the audio/x-wav MIME type, aka Bug ID CSCun91071.

Affected products

• Cisco Unity Connection: affected versions not specified

Published 2014-04-05. Last modified 2026-06-17.