{"id":"CVE-2014-2102","aliases":["EUVD-2014-2142","GHSA-m5xv-3g9j-8xv7"],"status":"published","title":"Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the...","description":"Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01355,"percentile":0.71776,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2014-02-27T01:00:00Z","modified":"2026-06-17T00:06:04Z","products":[{"vendor":"cisco","product":"unified_contact_center_express_editor_software"}],"references":[{"url":"http://www.securitytracker.com/id/1029842","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2102","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2102"},{"url":"https://github.com/advisories/GHSA-m5xv-3g9j-8xv7"}],"sources":{"cve":[{"id":"CVE-2014-2102","description":"Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575.","status":"published","published":"2014-02-27T01:00:00Z","modified":"2024-08-06T10:05:57.928Z","updated_at":"2026-11-02T14:33:43.883586Z"}],"euvd":[{"id":"EUVD-2014-2142","description":"Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575.","status":"published","published":"2014-02-27T01:00:00Z","modified":"2024-08-06T10:05:57Z","updated_at":"2026-11-03T01:57:15.270389Z"}],"ghsa":[{"id":"GHSA-m5xv-3g9j-8xv7","title":"Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the...","description":"Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575.","status":"published","published":"2022-05-17T04:11:01Z","modified":"2023-01-28T05:01:18Z","updated_at":"2026-11-02T14:43:32.326963Z"}],"nvd":[{"id":"CVE-2014-2102","description":"Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575.","status":"published","published":"2014-02-27T01:55:04.307Z","modified":"2026-06-17T00:06:04.22Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:53.330367Z"}]}}