CVE-2014-2193

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by…

published May 20, 2014

CVSS
—
EPSS
1%
Percentile
60.9
In the wild
Unconfirmed
What it is

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00958 · 60.9th percentile
Published
2014-05-20T10:00Z
EPSS history
Timeline
  • 20 MAY 10:00Z
    Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by…
    cvelistv5