CVE-2014-3292

The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199.

• CWE-20

• http://secunia.com/advisories/58315Permissions Required
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3292Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34574Vendor Advisory
• http://www.securitytracker.com/id/1030408Third Party Advisory, VDB Entry
• http://secunia.com/advisories/58315Permissions Required
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3292Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34574Vendor Advisory
• http://www.securitytracker.com/id/1030408Third Party Advisory, VDB Entry

Published

Jun 10, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3285Cisco Wide Area Application Services (WAAS) 5.3(.5a) and ear…
• CVE-2014-3286The web framework in Cisco WebEx Meeting Server does not pro…
• CVE-2014-3287SQL injection vulnerability in BulkViewFileContentsAction.ja…
• CVE-2014-3289Cross-site scripting (XSS) vulnerability in the web manageme…
• CVE-2014-3290The mDNS implementation in Cisco IOS XE 3.12S does not prope…
• CVE-2014-3291Cisco Wireless LAN Controller (WLC) devices allow remote att…
• CVE-2014-3293Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decis…
• CVE-2014-3294Cisco WebEx Meeting Server does not properly restrict the co…
• CVE-2014-3295The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier a…
• CVE-2014-3296The XML programmatic interface (XML PI) in Cisco WebEx Meeti…
• CVE-2014-3297Cisco Intelligent Automation for Cloud in Cisco Cloud Portal…
• CVE-2014-3298Form Data Viewer in Cisco Intelligent Automation for Cloud i…