AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-2195

MEDIUM · CVSS 4.3 EPSS 1.25%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-05-20 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. It affects Cisco. It may be remotely exploitable.

CVE
CVE-2014-2195
Severity
MEDIUM
CVSS
4.3
EPSS
1.25%
Cisco

Original NVD Description

Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085.