CVE-2014-3333
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to...
CVE-2014-3333 is a high vulnerability (CVSS 9.0) in Cisco Unity Connection, published August 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.13%, the 87th percentile. No source names a fixed version.
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
Exploit likelihood
What each source reports
NVD Score used
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
- Record
CVE-2014-3333- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
- Record
CVE-2014-3333- Updated
- 2026-11-02
EUVDEUVD-2014-3346 No score
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
- Record
EUVD-2014-3346- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-434r-4m9g-54qc No score
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to...
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
- Record
GHSA-434r-4m9g-54qc- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
exchange.xforce.ibmcloud.com/vulnerabilities/95135
tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3333
secunia.com/advisories/59768
securityfocus.com/bid/69074
securitytracker.com/id/1030688
nvd.nist.gov/vuln/detail/CVE-2014-3333
github.com/advisories/GHSA-434r-4m9g-54qc