← Back

CVE-2014-3352

nvd nist
Published: Aug 30, 2014Modified: May 6, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:P/I:N/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability," aka Bug ID CSCuh84801.

Affected (12)

Products: Cisco: Cloud Portal
Cisco
1 product
Cloud Portal
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Cloud Portal
Up to 2008.3
Cloud Portal
Version 2008.3
Cloud Portal
Version 2008.3 sp6
Cloud Portal
Version 2008.3 sp7
Cloud Portal
Version 2008.3 sp8
Cloud Portal
Version 9.1 sp1
Cloud Portal
Version 9.1 sp2
Cloud Portal
Version 9.1 sp3
Cloud Portal
Version 9.3.1
Cloud Portal
Version 9.3.2
Cloud Portal
Version 9.3
Cloud Portal
Version 9.4

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

Source: psirt@cisco.com
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.