{"id":"CVE-2014-0724","aliases":["EUVD-2014-0755","GHSA-5m93-68wm-7pmv"],"status":"published","title":"The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and...","description":"The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01031,"percentile":0.63963,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2014-02-13T02:00:00Z","modified":"2026-06-17T00:03:31Z","products":[{"vendor":"cisco","product":"unified_communications_manager"}],"references":[{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=32825","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0724","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0724"},{"url":"https://github.com/advisories/GHSA-5m93-68wm-7pmv"}],"sources":{"cve":[{"id":"CVE-2014-0724","description":"The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340.","status":"published","published":"2014-02-13T02:00:00Z","modified":"2024-08-06T09:27:18.646Z","updated_at":"2026-11-02T14:33:47.741012Z"}],"euvd":[{"id":"EUVD-2014-0755","description":"The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340.","status":"published","published":"2014-02-13T02:00:00Z","modified":"2024-08-06T09:27:18Z","updated_at":"2026-11-03T01:57:20.071815Z"}],"ghsa":[{"id":"GHSA-5m93-68wm-7pmv","title":"The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and...","description":"The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340.","status":"published","published":"2022-05-17T04:52:52Z","modified":"2023-01-28T05:02:41Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:43:49.735086Z"}],"nvd":[{"id":"CVE-2014-0724","description":"The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340.","status":"published","published":"2014-02-13T05:24:51.527Z","modified":"2026-06-17T00:03:31.69Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:53.330367Z"}]}}