CVE-2014-0722: The log4jinit web application in Cisco Unified Communications Manager (UCM) does not properly validate auth...

Security readout for executives and security teams

Cisco Unified Communications Manager included a log4jinit web application that did not properly validate authentication. A remote attacker could use it to cause denial of service through performance degradation. The provided sources do not include affected versions, CVSS score, named fixes, or proof of exploitation. Exposure is likely limited to environments running Cisco Unified Communications Manager with the log4jinit web application reachable by untrusted users. The bundle does not identify specific affected versions or deployment configurations. Treat this as an exposure-verification item, not a confirmed emergency. If UCM supports critical voice services or is reachable by untrusted users, prioritize vendor review and access restriction because the documented impact is service degradation. Mitigation focus: Review Cisco advisory CVE-2014-0722 for vendor-approved remediation.; Identify all Cisco Unified Communications Manager deployments.; Confirm whether log4jinit is reachable from untrusted networks..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.