XML External Entity Injection in Cisco Unified Web and E-mail Interaction Manager
CVE-2014-2194

Currently unrated

Key Information:

Vendor

Cisco
Status
Unified Web And E-mail Interaction Manager
Vendor
CVE Published:
20 May 2014

What is CVE-2014-2194?

The vulnerability in Cisco Unified Web and E-mail Interaction Manager allows remote attackers to exploit a flaw in the system's XML handling. By injecting a spoofed XML external entity, attackers can potentially manipulate data and execute unwanted commands, compromising the integrity and confidentiality of the application. This vulnerability highlights the importance of secure XML parsing practices to prevent malicious entity injection.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://tools.cisco.com/security/center/viewAlert.x?alertI...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.