CVE-2011-0966

🗓️ 20 May 2011 22:00:00Reported by ciscoType

cve

cve🔗 web.nvd.nist.gov👁 84 Views🌐 WEB

CVE-2011-0966 Directory traversal vulnerability in Cisco CiscoWorks Common Service

Reporter	Title	Published	Views	Family All 14
0day.today	Cisco Unified Operations Manager Multiple Vulnerabilities - SOS-11-006	18 May 201100:00	–	zdt
Circl	CVE-2011-0966	18 May 201100:00	–	circl
Tenable Nessus	Cisco Unified Operations Manager < 8.6 Multiple Vulnerabilities	13 Oct 201100:00	–	nessus
Cvelist	CVE-2011-0966	20 May 201122:00	–	cvelist
Exploit DB	Cisco Unified Operations Manager - Multiple Vulnerabilities	18 May 201100:00	–	exploitdb
Exploit DB	CiscoWorks Common Services 3.1.1 - Auditing Directory Traversal	18 May 201100:00	–	exploitdb
exploitpack	Cisco Unified Operations Manager - Multiple Vulnerabilities	18 May 201100:00	–	exploitpack
NVD	CVE-2011-0966	20 May 201122:55	–	nvd
Packet Storm	Cisco Unified Operations Manager XSS / SQL Injection / Directory Traversal	18 May 201100:00	–	packetstorm
Prion	Directory traversal	20 May 201122:55	–	prion

NVD

Node

OR

cisco ciscoworks_common_servicesRange≤3.3

cisco ciscoworks_common_servicesMatch1.0

cisco ciscoworks_common_servicesMatch2.2

cisco ciscoworks_common_servicesMatch3.0

cisco ciscoworks_common_servicesMatch3.0.3

cisco ciscoworks_common_servicesMatch3.0.4

cisco ciscoworks_common_servicesMatch3.0.5

cisco ciscoworks_common_servicesMatch3.0.6

cisco ciscoworks_common_servicesMatch3.1

cisco ciscoworks_common_servicesMatch3.1.1

cisco ciscoworks_common_servicesMatch3.2

Source	Link
exploit-db	www.exploit-db.com/exploits/17304
tools	www.tools.cisco.com/security/center/viewAlert.x
senseofsecurity	www.senseofsecurity.com.au/advisories/SOS-11-006.pdf
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/67525
archives	www.archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html

Parameter	Position	Path	Description	CWE
file	query param	/cwhp/auditLog.do?file=..\..\..\..\..\..\..\boot.ini	Directory traversal vulnerability via file parameter to auditLog.do	CWE-22
file	query param	/cwhp/auditLog.do?file=..\..\..\..\..\..\..\Program Files\CSCOpx\MDC\Tomcat\webapps\triveni\WEB-INF\classes\schedule.properties	Directory traversal to access schedule.properties	CWE-22
file	query param	/cwhp/auditLog.do?file=..\..\..\..\..\..\..\Program Files\CSCOpx\lib\classpath\com\cisco\nm\cmf\dbservice2\DBServer.properties	Directory traversal to access DBServer.properties	CWE-22
file	query param	/cwhp/auditLog.do?file=..\..\..\..\..\..\..\Program Files\CSCOpx\log\dbpwdChange.log	Directory traversal to access dbpwdChange.log	CWE-22

16 Jun 2026 23:28Current

6.6Medium risk

Vulners AI Score6.6

CVSS 26.8

EPSS0.41348

cve-2011-0966 directory traversal ciscoworks common services vulnerability security cisco