CVE-2014-3320

Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted URLs for unspecified scripts, aka Bug ID CSCuo48835.

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3320Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34960Vendor Advisory
• http://www.securityfocus.com/bid/68694Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030613Third Party Advisory, VDB Entry
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3320Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34960Vendor Advisory
• http://www.securityfocus.com/bid/68694Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030613Third Party Advisory, VDB Entry

Published

Jul 18, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3314Cisco AnyConnect on Android and OS X does not properly verif…
• CVE-2014-3315Cross-site scripting (XSS) vulnerability in viewfilecontents…
• CVE-2014-3316The Multiple Analyzer in the Dialed Number Analyzer (DNA) co…
• CVE-2014-3317Directory traversal vulnerability in the Multiple Analyzer i…
• CVE-2014-3318Directory traversal vulnerability in dna/viewfilecontents.do…
• CVE-2014-3319Directory traversal vulnerability in the Real-Time Monitorin…
• CVE-2014-3321Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bri…
• CVE-2014-3322Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does no…
• CVE-2014-3323Directory traversal vulnerability in Cisco Unified Contact C…
• CVE-2014-3324Multiple cross-site scripting (XSS) vulnerabilities in the l…
• CVE-2014-3325Multiple cross-site scripting (XSS) vulnerabilities in Cisco…
• CVE-2014-3326SQL injection vulnerability in the web framework in Cisco Se…