{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:25:13Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20141211-CVE-2014-8730","slug":"cisco-sa-20141211-cve-2014-8730","vendor":"Cisco","title":"SSL-TLS Implementations Cipher Block Chaining Padding Information Disclosure Vulnerability","summary":"A vulnerability in certain implementations of the TLSv1 protocol could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to improper block cipher padding implemented in TLSv1 when using Cipher Block Chaining (CBC) mode. An attacker could exploit the vulnerability to perform an \"oracle padding\" side channel attack on the cryptographic message. A successful exploit could allow the attacker to access sensitive information. Consult the bug release note for additional information about affected products and configurations. F5 Networks has confirmed the vulnerability in a security advisory and released software updates. Attacks exploiting this vulnerability are identified as Padding Oracle On Downgraded Legacy Encryption (POODLE) attacks, which could be used to disclose HTTP cookies or other HTTP authorization content that is being transmitted over an TLSv1.x secure session. This issue should not be confused with CVE-2014-3566, as described in Cisco Alert 36084. It should be noted that oracle does not refer to the software company of the same name, but to a term used in cryptography. To exploit the vulnerability, the attacker may require access to a trusted, internal network to perform man-in-the-middle attacks on a targeted system. This access requirement limits the likelihood of a successful exploit.","severity":"Medium","published_at":"2014-12-12T03:21:05Z","updated_at":"2014-12-12T03:21:05Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141211-CVE-2014-8730","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20141211-CVE-2014-8730/csaf/Cisco-SA-20141211-CVE-2014-8730.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":2,"visible_product_count":4,"public_evidence_count":4,"kev_count":0,"highest_epss":0.1372},"cves":[{"id":"CVE-2014-8730","kev":false,"epss":{"score":0.1372,"percentile":0.96088,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2014-3566","kev":false}],"public_evidence":[{"product":{"name":"Cisco Adaptive Security Appliance (ASA) Software","slug":"cisco-adaptive-security-appliance-asa-software","vendor":"Cisco"},"cve":{"id":"CVE-2014-8730"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:31:53Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"7.0.1; 7.0.1.4; 7.0.2; 7.0.3; 7.0.4; 7.0.4.2; 7.0.5; 7.0.5.12; 7.0.6; 7.0.6.18; 7.0.6.22; 7.0.6.26; 7.0.6.29; 7.0.6.32; 7.0.6.4; 7.0.6.8; 7.0.7; 7.0.7.1; 7.0.7.12; 7.0.7.4; 7.0.7.9; 7.0.8; 7.0.8.12; 7.0.8.13; 7.0.8.2; 7.0.8.8; 7.1.2; 7.1.2.16; 7.1.2.20; 7.1.2.24; 7.1.2.28; 7.1.2.38; 7.1.2.42; 7.1.2.46; 7.1.2.49; 7.1.2.53; 7.1.2.61; 7.1.2.64; 7.1.2.72; 7.1.2.81; 7.2.1; 7.2.1.13; 7.2.1.19; 7.2.1.24; 7.2.1.9; 7.2.2; 7.2.2.10; 7.2.2.14; 7.2.2.18; 7.2.2.19; 7.2.2.22; 7.2.2.34; 7.2.2.6; 7.2.3; 7.2.3.1; 7.2.3.12; 7.2.3.16; 7.2.4; 7.2.4.18; 7.2.4.25; 7.2.4.27; 7.2.4.30; 7.2.4.33; 7.2.4.6; 7.2.4.9; 7.2.5; 7.2.5.10; 7.2.5.12; 7.2.5.2; 7.2.5.4; 7.2.5.7; 7.2.5.8; 8.0.1.2; 8.0.2; 8.0.2.11; 8.0.2.15; 8.0.3; 8.0.3.12; 8.0.3.19; 8.0.3.6; 8.0.4; 8.0.4.16; 8.0.4.23; 8.0.4.25; 8.0.4.28; 8.0.4.3; 8.0.4.31; 8.0.4.32; 8.0.4.33; 8.0.4.9; 8.0.5; 8.0.5.20; 8.0.5.23; 8.0.5.25; 8.0.5.27; 8.0.5.28; 8.0.5.31; 8.1.1; 8.1.1.6; 8.1.2; 8.1.2.13; 8.1.2.15; 8.1.2.16; 8.1.2.19; 8.1.2.23; 8.1.2.24; 8.1.2.49; 8.1.2.50; 8.1.2.55; 8.1.2.56; 8.2.0.45; 8.2.1; 8.2.1.11; 8.2.2; 8.2.2.10; 8.2.2.12; 8.2.2.16; 8.2.2.17; 8.2.2.9; 8.2.3; 8.2.4; 8.2.4.1; 8.2.4.4; 8.2.5; 8.2.5.13; 8.2.5.22; 8.2.5.26; 8.2.5.33; 8.2.5.40; 8.2.5.41; 8.2.5.46; 8.2.5.48; 8.2.5.50; 8.3.1; 8.3.1.1; 8.3.1.4; 8.3.1.6; 8.3.2; 8.3.2.13; 8.3.2.23; 8.3.2.25; 8.3.2.31; 8.3.2.33; 8.3.2.34; 8.3.2.37; 8.3.2.39; 8.3.2.4; 8.3.2.40; 8.3.2.41; 8.4.1; 8.4.1.11; 8.4.1.3; 8.4.2; 8.4.2.1; 8.4.2.8; 8.4.3; 8.4.3.8; 8.4.3.9; 8.4.4; 8.4.4.1; 8.4.4.3; 8.4.4.5; 8.4.4.9; 8.4.5; 8.4.5.6; 8.4.6; 8.4.7; 8.4.7.15; 8.4.7.22; 8.4.7.23; 8.4.7.3; 8.5.1; 8.5.1.1; 8.5.1.14; 8.5.1.17; 8.5.1.18; 8.5.1.19; 8.5.1.21; 8.5.1.6; 8.5.1.7; 8.6.1; 8.6.1.1; 8.6.1.10; 8.6.1.12; 8.6.1.13; 8.6.1.14; 8.6.1.2; 8.6.1.5; 8.7.1; 8.7.1.1; 8.7.1.11; 8.7.1.13; 8.7.1.3; 8.7.1.4; 8.7.1.7; 8.7.1.8; 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; 9.0.4; 9.0.4.1; 9.0.4.17; 9.0.4.20; 9.0.4.24; 9.0.4.5; 9.0.4.7; 9.1.1; 9.1.1.4; 9.1.2; 9.1.2.8; 9.1.3; 9.1.3.2; 9.1.4; 9.1.4.5; 9.1.5; 9.1.5.10; 9.1.5.12; 9.1.5.15; 9.2.1; 9.2.2; 9.2.2.4; 9.2.2.7; 9.2.2.8; 9.2.3; 9.3.1; 9.3.1.1; 9.3.2","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.1372,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2014-12-12T03:21:05Z","updated_at":"2014-12-12T03:21:05Z","advisory_updated_at":"2014-12-12T03:21:05Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141211-CVE-2014-8730","row_display_order":1},{"product":{"name":"Cisco ACE Application Control Engine Module","slug":"cisco-ace-application-control-engine-module","vendor":"Cisco"},"cve":{"id":"CVE-2014-8730"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:31:53Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ACE Application Control Engine Module","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.1372,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2014-12-12T03:21:05Z","updated_at":"2014-12-12T03:21:05Z","advisory_updated_at":"2014-12-12T03:21:05Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141211-CVE-2014-8730","row_display_order":2},{"product":{"name":"Cisco IOS","slug":"cisco-ios","vendor":"Cisco"},"cve":{"id":"CVE-2014-8730"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:31:53Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco IOS","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.1372,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2014-12-12T03:21:05Z","updated_at":"2014-12-12T03:21:05Z","advisory_updated_at":"2014-12-12T03:21:05Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141211-CVE-2014-8730","row_display_order":3},{"product":{"name":"Cisco ASR 5000 Series Software","slug":"cisco-asr-5000-series-software","vendor":"Cisco"},"cve":{"id":"CVE-2014-8730"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:31:53Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ASR 5000 Series Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.1372,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2014-12-12T03:21:05Z","updated_at":"2014-12-12T03:21:05Z","advisory_updated_at":"2014-12-12T03:21:05Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141211-CVE-2014-8730","row_display_order":4}]}