Unrated severityNVD Advisory· Published Apr 5, 2014· Updated Jun 17, 2026

CVE-2014-2145

Description

Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access constraints for .wav files and the audio/x-wav MIME type, aka Bug ID CSCun91071.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Unity Connection2 versions
cpe:2.3:a:cisco:unity_connection:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:unity_connection:-:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2145nvdVendor Advisory
www.securityfocus.com/bid/66676nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000