CVE-2014-2116

EUVD-2014-2156
Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
Affected Products (NVD)
VendorProductVersion
ciscoemergency_responder
𝑥
≤ 8.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2116
http://tools.cisco.com/security/center/viewAlert.x?alertId=33641
http://www.securityfocus.com/bid/66632
http://www.securitytracker.com/id/1030019
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2116
http://tools.cisco.com/security/center/viewAlert.x?alertId=33641
http://www.securityfocus.com/bid/66632
http://www.securitytracker.com/id/1030019