CVE-2014-3318: Cisco Unified Communications Manager

Medium severity, CVSS 4.0. EPSS: 3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup76318.

Affected products

• Cisco Unified Communications Manager: any version; version 10.0(1)_base only

Published 2014-07-10. Last modified 2026-06-17.