GCVE - cpe:2.3:a:cisco:cloud_portal:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:cloud_portal:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Cloud Portal (`ba558c75-0143-5e68-b987-f2321a1bc78c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3351`	vulnerable	2026-06-08 05:05:32.220204	Details available Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, aka Bug IDs CSCuh87398 and CSCuh87380. Published: 2014-08-29T10:00:00.000Z Updated: 2024-08-06T10:43:05.132Z Open on db.gcve.eu Reference links http://secunia.com/advisories/60960 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3351 http://www.securityfocus.com/bid/69456 http://www.securitytracker.com/id/1030782 https://exchange.xforce.ibmcloud.com/vulnerabilities/95585	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3350`	vulnerable	2026-06-08 05:05:32.219887	Details available Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL redirection, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCuh84870. Published: 2014-08-29T10:00:00.000Z Updated: 2024-08-06T10:43:05.156Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/95587 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3350 http://www.securityfocus.com/bid/69457 http://www.securitytracker.com/id/1030784	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3349`	vulnerable	2026-06-08 05:05:32.219574	Details available Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410. Published: 2014-08-29T10:00:00.000Z Updated: 2024-08-06T10:43:05.151Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3349 http://www.securitytracker.com/id/1030783 https://exchange.xforce.ibmcloud.com/vulnerabilities/95586 http://www.securityfocus.com/bid/69455	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3298`	vulnerable	2026-06-08 05:05:32.099874	Details available Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976. Published: 2014-07-02T10:00:00.000Z Updated: 2024-08-06T10:35:57.235Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3298 http://tools.cisco.com/security/center/viewAlert.x?alertId=34833 http://secunia.com/advisories/58985 http://www.securityfocus.com/bid/68309 http://www.securitytracker.com/id/1030511	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3297`	vulnerable	2026-06-08 05:05:32.099478	Details available Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices action URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug IDs CSCui36937, CSCui37004, and CSCui36927. Published: 2014-07-02T10:00:00.000Z Updated: 2024-08-06T10:35:57.107Z Open on db.gcve.eu Reference links http://secunia.com/advisories/59401 http://tools.cisco.com/security/center/viewAlert.x?alertId=34834 http://www.securityfocus.com/bid/68308 http://secunia.com/advisories/58985 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3297	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.