CVE-2014-0735: Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Comm...

Security readout for executives and security teams

CVE-2014-0735 is a reflected cross-site scripting issue in Cisco Unified Communications Manager's IP Manager Assistant interface. An attacker could use a crafted URL to make the interface render attacker-controlled script or HTML. Business risk is mainly credential/session exposure or actions taken in a trusted user's browser if affected systems are reachable. Organizations are likely exposed only if they run Cisco Unified Communications Manager 10.0(1) or earlier and the IPMA interface is enabled or reachable by users who could be targeted with crafted links. Treat this as a targeted administrative-web risk, not an internet-scale emergency based on the provided evidence. Prioritize remediation where Unified CM is old, broadly reachable, or used by privileged administrators. Mitigation focus: Check Cisco's advisory for fixed releases, workarounds, and upgrade guidance.; Inventory Unified CM versions and prioritize systems at 10.0(1) or earlier.; Restrict IPMA and Unified CM administrative access to trusted networks..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.