{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:40:26Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20140829-CVE-2014-3350","slug":"cisco-sa-20140829-cve-2014-3350","vendor":"Cisco","title":"Cisco Intelligent Automation for Cloud URL Redirection Vulnerability","summary":"A vulnerability in the URL redirection of Cisco Intelligent Automation for Cloud could allow an authenticated, remote attacker to obtain sensitive information. The vulnerability is due to improper sanitization of redirect URLs. An attacker could exploit this vulnerability by submitting crafted URLs. Cisco has confirmed the vulnerability in a security notice; however, software updates are not available. After a successful exploit, the attacker could redirect a targeted user to a malicious site in an attempt to obtain sensitive information.","severity":"Medium","published_at":"2014-08-29T14:24:10Z","updated_at":"2014-08-29T14:24:10Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140829-CVE-2014-3350","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20140829-CVE-2014-3350/csaf/Cisco-SA-20140829-CVE-2014-3350.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.01638},"cves":[{"id":"CVE-2014-3350","kev":false,"epss":{"score":0.01638,"percentile":0.73706,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"}}],"public_evidence":[{"product":{"name":"Cisco Cloud Portal","slug":"cisco-cloud-portal","vendor":"Cisco"},"cve":{"id":"CVE-2014-3350"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:54:12Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Cloud Portal","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01638,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2014-08-29T14:24:10Z","updated_at":"2014-08-29T14:24:10Z","advisory_updated_at":"2014-08-29T14:24:10Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140829-CVE-2014-3350","row_display_order":1}]}