CVE-2014-2138
CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCun82349.
Ver en NVDSeveridad
N/A
EPSS
Probabilidad de explotación (próx. 30 días): 0.0021 (0.2%)
Percentil: 43.4%
EPSS: 2026-05-06
Afecta
cisco:security_managerDescripción técnica
CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCun82349.
Publicada: 2/4/2014, 3:58:17
Última modificación: 6/5/2026, 22:30:45