CVE-2014-0666

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Jan 16, 2014
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-06676.3The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authCVE-2014-06684.3Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitraCVE-2014-06695.0The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remoteCVE-2014-06704.3Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary weCVE-2014-06715.8Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attackCVE-2014-06724.0The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated usCVE-2014-06734.3Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote atCVE-2014-06746.8Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attacCVE-2014-06756.4The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different cusCVE-2014-06766.8Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367.CVE-2014-06775.0The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP sessiCVE-2014-06785.5The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users
CVE-2014-0666: Medium severity, CVSS 4.3 | Vulnix