CVE-2014-3333
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to...
CVE-2014-3333 is a high vulnerability (CVSS 9.0) in Cisco Unity Connection, published August 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.13%, the 88th percentile. No source names a fixed version.
- Severity
- 9.0 HighCVSS 2.0, NVD
- Exploit chance
- 3.13%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
Exploit likelihood
Affected products
What each source reports
NVD Score used
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
- Record
CVE-2014-3333- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
- Record
CVE-2014-3333- Updated
- 2026-11-02
EUVDEUVD-2014-3346No score
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
- Record
EUVD-2014-3346- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-434r-4m9g-54qcNo score
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to...
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
- Record
GHSA-434r-4m9g-54qc- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/95135
tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3333
secunia.com/advisories/59768
securityfocus.com/bid/69074
securitytracker.com/id/1030688
nvd.nist.gov/vuln/detail/CVE-2014-3333
github.com/advisories/GHSA-434r-4m9g-54qc