# CVEs published 2014-07-18

6 CVEs were published on July 18, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0957](https://cve.now/CVE-2014-0957.md): Cross-site scripting (XSS) vulnerability in IBM Business Process Manager 7.5 through 8.5.5, and WebSphere Lombardi Edition 7.2, allows remot (no CVSS)
- [CVE-2014-2623](https://cve.now/CVE-2014-2623.md): Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors. (no CVSS)
- [CVE-2014-3306](https://cve.now/CVE-2014-3306.md): The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway pro (no CVSS)
- [CVE-2014-3320](https://cve.now/CVE-2014-3320.md): Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) (no CVSS)
- [CVE-2014-3321](https://cve.now/CVE-2014-3321.md): Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to (no CVSS)
- [CVE-2014-3323](https://cve.now/CVE-2014-3323.md): Directory traversal vulnerability in Cisco Unified Contact Center Enterprise allows remote authenticated users to read arbitrary web-root fi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-07-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.