CVE-2014-0666 json
Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote at…
published 2014-01-16 12 y ago modified 2026-06-17 4 mo ago also EUVD-2014-0697
- cvss
- 4.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 5.5%
- EPSS 5.5% chance of exploitation in 30 days, percentile 92%
- public exploits
- 0
- none known
Summary
Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056.
Exploit prediction
5.54% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
tools.cisco.com
/security/center/content/CiscoSecurityNotice/CVE-2014-0666
vendor-advisory
-
tools.cisco.com
/security/center/viewAlert.x?alertId=32451
vendor-advisory
-
securitytracker.com
/id/1029635
vdb-entry, third-party-advisory
-
secunia.com
/advisories/56331
third-party-advisory
-
securityfocus.com
/bid/64965
vdb-entry, third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/90435
vdb-entry
-
osvdb.org
/102122
vdb-entry
Sources
- CVE List CVE-2014-0666
- NVD CVE-2014-0666
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.