CVE-2014-2197
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM)...
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.
Exploit likelihood
What each source reports
NVD Score used
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.
- Record
CVE-2014-2197- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.
- Record
CVE-2014-2197- Updated
- 2026-11-02
EUVDEUVD-2014-2237No score
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.
- Record
EUVD-2014-2237- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-674c-6v72-jq3qNo score
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM)...
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.
- Record
GHSA-674c-6v72-jq3q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2197 is a high vulnerability (CVSS 9.0) in Cisco Unified Cdm Application Software, published July 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.88%, the 87th percentile. No source names a fixed version.
References
secunia.com/advisories/59573
securitytracker.com/id/1030515
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
securityfocus.com/bid/68333
nvd.nist.gov/vuln/detail/CVE-2014-2197
github.com/advisories/GHSA-674c-6v72-jq3q