CVE-2014-3300

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.

• CWE-264

• http://secunia.com/advisories/59556
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdmVendor Advisory
• http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689Vendor Advisory
• http://www.securityfocus.com/bid/68331Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030515Third Party Advisory, VDB Entry
• http://secunia.com/advisories/59556
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdmVendor Advisory
• http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689Vendor Advisory
• http://www.securityfocus.com/bid/68331Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030515Third Party Advisory, VDB Entry

Published

Jul 7, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3294Cisco WebEx Meeting Server does not properly restrict the co…
• CVE-2014-3295The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier a…
• CVE-2014-3296The XML programmatic interface (XML PI) in Cisco WebEx Meeti…
• CVE-2014-3297Cisco Intelligent Automation for Cloud in Cisco Cloud Portal…
• CVE-2014-3298Form Data Viewer in Cisco Intelligent Automation for Cloud i…
• CVE-2014-3299Cisco IOS allows remote authenticated users to cause a denia…
• CVE-2014-3301The ProfileAction controller in Cisco WebEx Meetings Server …
• CVE-2014-3302user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earl…
• CVE-2014-3303The web framework in Cisco WebEx Meetings Server does not pr…
• CVE-2014-3304The OutlookAction Class in Cisco WebEx Meetings Server allow…
• CVE-2014-3305Cross-site request forgery (CSRF) vulnerability in the web f…
• CVE-2014-3306The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, …