CVE-2013-5486

🗓️ 23 Sep 2013 10:00:00Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 214 Views🌐 WEB

CVE-2013-5486 Directory traversal vulnerability in DCNM-SAN Serve

Reporter	Title	Published	Views	Family All 18
zdt	Cisco Prime Data Center Network Manager Arbitrary File Upload Vulnerability	3 Dec 201300:00	–	zdt
zdt	Cisco Prime Data Center Network Manager Arbitrary File Upload	3 Dec 201300:00	–	zdt
Circl	CVE-2013-5486	3 Dec 201300:00	–	circl
Cisco	Multiple Vulnerabilities in Cisco Prime Data Center Network Manager	18 Sep 201316:00	–	cisco
Tenable Nessus	Cisco Prime Data Center Network Manager < 6.2(1) Multiple Vulnerabilities (uncredentialed check)	27 Sep 201300:00	–	nessus
Tenable Nessus	Cisco Prime Data Center Network Manager < 6.2(1) Multiple Vulnerabilities (credentialed check)	27 Sep 201300:00	–	nessus
Check Point Advisories	Cisco Prime Data Center Network Manager processImageSave.jsp Arbitrary File Upload (CVE-2013-5486)	6 Jan 201400:00	–	checkpoint_advisories
Check Point Advisories	Cisco Prime Data Center Network Manager FileUploadServlet Arbitrary File Upload (CVE-2013-5486; CVE-2019-1620)	31 Dec 201300:00	–	checkpoint_advisories
Cvelist	CVE-2013-5486	23 Sep 201310:00	–	cvelist
Exploit DB	Cisco Prime Data Center Network Manager - Arbitrary File Upload (Metasploit)	3 Dec 201300:00	–	exploitdb

NVD

Node

OR

cisco prime_data_center_network_managerMatch4.1(2)

cisco prime_data_center_network_managerMatch4.1(3)

cisco prime_data_center_network_managerMatch4.1(4)

cisco prime_data_center_network_managerMatch4.1(5)

cisco prime_data_center_network_managerMatch4.2(1)

cisco prime_data_center_network_managerMatch4.2(3)

cisco prime_data_center_network_managerMatch5.0(2)

cisco prime_data_center_network_managerMatch5.0(3)

cisco prime_data_center_network_managerMatch5.1(1)

cisco prime_data_center_network_managerMatch5.1(2)

cisco prime_data_center_network_managerMatch5.1(3u)

cisco prime_data_center_network_managerMatch5.2(2)

cisco prime_data_center_network_managerMatch5.2(2a)

cisco prime_data_center_network_managerMatch5.2(2b)

cisco prime_data_center_network_managerMatch5.2(2c)

cisco prime_data_center_network_managerMatch5.2(2e)

cisco prime_data_center_network_managerMatch6.1(1a)

cisco prime_data_center_network_managerMatch6.1(1b)

Node

OR

cisco prime_data_center_network_managerRange≤6.1(1b)

cisco prime_data_center_network_managerMatch5.2(2e)

cisco prime_data_center_network_managerMatch6.1(1a)

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-dcnm
exploit-db	www.exploit-db.com/exploits/30008

Parameter	Position	Path	Description	CWE
mode	request body	/cues_utility/charts/processImageSave.jsp	Directory traversal vulnerability in processImageSave.jsp allowing arbitrary file write via chartid; can lead to remote code execution via JBoss autodeploy.	CWE-78
savefile	request body	/cues_utility/charts/processImageSave.jsp	Directory traversal vulnerability in processImageSave.jsp allowing arbitrary file write via chartid; can lead to remote code execution via JBoss autodeploy.	CWE-78
chartid	request body	/cues_utility/charts/processImageSave.jsp	Directory traversal vulnerability in processImageSave.jsp allowing arbitrary file write via chartid; can lead to remote code execution via JBoss autodeploy.	CWE-78
data	request body	/cues_utility/charts/processImageSave.jsp	Directory traversal vulnerability in processImageSave.jsp allowing arbitrary file write via chartid; can lead to remote code execution via JBoss autodeploy.	CWE-78

16 Jun 2026 23:58Current

9.6Critical risk

Vulners AI Score9.6

CVSS 210

EPSS0.75962

cve-2013-5486 directory traversal vulnerability dcnm-san server cisco prime data center network manager bug ids cscue77035 cscue77036 jboss autodeploy