CVE-2014-2138

MEDIUM · CVSS 4.3 EPSS 0.95%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-04-02 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-2138

Severity

MEDIUM

CVSS

4.3

EPSS

0.95%

Cisco

Original Filing — NVD Description

CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCun82349.