← Vulnerability feed

Vulnerability record · CVE-2014-2196 · published 26 May 2014

CVE-2014-2196: Cisco wide area application services code injection vulnerability

Cisco · Wide Area Application Services

Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response, aka Bug ID CSCue18479.

9.3 CVSS 2.0 High EPSS 2.4% · top 16.4% CWE-94 · Code injection
9.3CVSS 2.0 base score
2.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response, aka Bug ID CSCue18479.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-waas Vendor Advisory
http://www.securitytracker.com/id/1030265 Third Party AdvisoryVDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-waas Vendor Advisory
http://www.securitytracker.com/id/1030265 Third Party AdvisoryVDB Entry

Track CVE-2014-2196 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2013-3443Cisco wide area application services improper input validation vulnerabilityThe web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) con…EPSS 6.0%9.0CVE-2013-3444Cisco wide area application services os command injection vulnerabilityThe web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5…EPSS 4.2%7.8CVE-2007-3923Cisco wide area application services vulnerabilityThe Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance an…EPSS 2.0%7.5CVE-2015-6421Cisco wide area application services vulnerabilitycifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5…EPSS 1.9%6.8CVE-2017-6628Cisco wide area application services vulnerabilityA vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unaut…EPSS 1.7%6.7CVE-2018-0352Cisco wide area application services permissions and access controls vulnerabilityA vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local a…EPSS 0.39%6.5CVE-2017-12256Cisco wide area application services vulnerabilityA vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attack…EPSS 1.4%5.9CVE-2016-6437Cisco wide area application services vulnerabilityA vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to…EPSS 1.7%

Source: NIST National Vulnerability Database (record CVE-2014-2196), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.