{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:04:44Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20141212-CVE-2014-8010","slug":"cisco-sa-20141212-cve-2014-8010","vendor":"Cisco","title":"Cisco Unified Communications Domain Manager Blind Command Injection Vulnerability","summary":"A vulnerability in the web framework of Cisco Unified Communications Domain Manager Application Software version 8 could allow an authenticated, remote attacker to inject commands that can be executed by the underlying operating system with the privileges of the web server process. The vulnerability is due to insufficient input validation when the user sets some values in the user interface. An attacker could exploit this vulnerability by logging in to the system and injecting malicious commands. An exploit could allow the attacker to execute commands remotely with the privileges of the web server process. Administrative credentials are needed to exploit this issue. Cisco has confirmed the vulnerability in a security notice and released software updates. Administrator credentials are required to exploit this vulnerability. In addition; the attacker may need access to trusted or internal networks to inject malicious commands on the targeted system. This access requirement could limit the likelihood of a successful exploit. Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.","severity":"Medium","published_at":"2014-12-12T16:59:30Z","updated_at":"2014-12-12T16:59:30Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141212-CVE-2014-8010","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20141212-CVE-2014-8010/csaf/Cisco-SA-20141212-CVE-2014-8010.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.01499},"cves":[{"id":"CVE-2014-8010","kev":false,"epss":{"score":0.01499,"percentile":0.71441,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Unified Communications Domain Manager","slug":"cisco-unified-communications-domain-manager","vendor":"Cisco"},"cve":{"id":"CVE-2014-8010"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:01:10Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Communications Domain Manager","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01499,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2014-12-12T16:59:30Z","updated_at":"2014-12-12T16:59:30Z","advisory_updated_at":"2014-12-12T16:59:30Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141212-CVE-2014-8010","row_display_order":1}]}