{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:05:18Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20140710-CVE-2014-3311","slug":"cisco-sa-20140710-cve-2014-3311","vendor":"Cisco","title":"Cisco WebEx Meetings Client Heap-Based Buffer Overflow Vulnerability","summary":"A vulnerability in the file sharing functionality of the Cisco WebEx Meetings client could allow an unauthenticated, remote attacker to trigger a heap-based buffer overflow in the Cisco WebEx Meetings client running on another user's computer. The vulnerability exists because the affected software does not properly check the bounds of the data being transferred. An attacker could exploit this vulnerability by using a modified Cisco WebEx Meetings client. An exploit could allow the attacker to execute code on the remote computer or cause a denial of service (DoS) condition by crashing the remote Cisco WebEx Meetings client. Cisco has confirmed the vulnerability in a security notice and released software updates. To exploit this vulnerability, an attacker may attempt to convince a targeted user to download a malformed file with the Cisco WebEx Meetings client by using misleading language and instructions. Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.","severity":"Medium","published_at":"2014-07-10T15:27:10Z","updated_at":"2014-07-10T15:27:10Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140710-CVE-2014-3311","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20140710-CVE-2014-3311/csaf/Cisco-SA-20140710-CVE-2014-3311.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":2,"public_evidence_count":2,"kev_count":0,"highest_epss":0.03413},"cves":[{"id":"CVE-2014-3311","kev":false,"epss":{"score":0.03413,"percentile":0.87558,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"}}],"public_evidence":[{"product":{"name":"Cisco WebEx Meetings Server","slug":"cisco-webex-meetings-server","vendor":"Cisco"},"cve":{"id":"CVE-2014-3311"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:22:43Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco WebEx Meetings Server","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03413,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2014-07-10T15:27:10Z","updated_at":"2014-07-10T15:27:10Z","advisory_updated_at":"2014-07-10T15:27:10Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140710-CVE-2014-3311","row_display_order":1},{"product":{"name":"Cisco WebEx Meeting Center","slug":"cisco-webex-meeting-center","vendor":"Cisco"},"cve":{"id":"CVE-2014-3311"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:22:43Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco WebEx Meeting Center","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03413,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2014-07-10T15:27:10Z","updated_at":"2014-07-10T15:27:10Z","advisory_updated_at":"2014-07-10T15:27:10Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140710-CVE-2014-3311","row_display_order":2}]}