Cisco Unified Cdm Application Software vulnerabilities

2 CVEs affecting Cisco Unified Cdm Application Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3300, published 2014-07-07.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-3300, published 2014-07-07. High severity, CVSS 7.5. EPSS: 21.9% chance of exploitation in the next 30 days. The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows…
• CVE-2014-2197, published 2014-07-07. High severity, CVSS 9.0. EPSS: 2.9% chance of exploitation in the next 30 days. The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which…