Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-6688
cve
2013
6688
directory traversal
vulnerability
cisco
unified communications manager
elm
enterprise license manager
bug id
cscui58222
nvd
6.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:C/A:N
6.4 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.8%
Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222.
Affected configurations
Node
ciscounified_communications_managerRange≤9.1\(1\)
ORciscounified_communications_managerMatch3.3\(5\)
ORciscounified_communications_managerMatch3.3\(5\)sr1
ORciscounified_communications_managerMatch3.3\(5\)sr2a
ORciscounified_communications_managerMatch4.1\(3\)
ORciscounified_communications_managerMatch4.1\(3\)sr1
ORciscounified_communications_managerMatch4.1\(3\)sr2
ORciscounified_communications_managerMatch4.1\(3\)sr3
ORciscounified_communications_managerMatch4.1\(3\)sr4
ORciscounified_communications_managerMatch4.2
ORciscounified_communications_managerMatch4.2.1
ORciscounified_communications_managerMatch4.2.2
ORciscounified_communications_managerMatch4.2.3
ORciscounified_communications_managerMatch4.2.3sr1
ORciscounified_communications_managerMatch4.2.3sr2
ORciscounified_communications_managerMatch4.2.3sr2b
ORciscounified_communications_managerMatch4.3
ORciscounified_communications_managerMatch4.3\(1\)
ORciscounified_communications_managerMatch5.0
ORciscounified_communications_managerMatch5.1
ORciscounified_communications_managerMatch5.1\(1\)
ORciscounified_communications_managerMatch5.1\(1b\)
ORciscounified_communications_managerMatch5.1\(1c\)
ORciscounified_communications_managerMatch5.1\(2\)
ORciscounified_communications_managerMatch5.1\(2a\)
ORciscounified_communications_managerMatch5.1\(2b\)
ORciscounified_communications_managerMatch5.1\(3\)
ORciscounified_communications_managerMatch5.1\(3a\)
ORciscounified_communications_managerMatch5.1\(3c\)
ORciscounified_communications_managerMatch5.1\(3d\)
ORciscounified_communications_managerMatch5.1\(3e\)
ORciscounified_communications_managerMatch5.1.2
ORciscounified_communications_managerMatch6.0
ORciscounified_communications_managerMatch6.0\(1\)
ORciscounified_communications_managerMatch6.0\(1a\)
ORciscounified_communications_managerMatch6.0\(1b\)
ORciscounified_communications_managerMatch6.1\(1\)
ORciscounified_communications_managerMatch6.1\(1a\)
ORciscounified_communications_managerMatch6.1\(1b\)
ORciscounified_communications_managerMatch6.1\(2\)
ORciscounified_communications_managerMatch6.1\(2\)su1
ORciscounified_communications_managerMatch6.1\(2\)su1a
ORciscounified_communications_managerMatch6.1\(3\)
ORciscounified_communications_managerMatch6.1\(3a\)
ORciscounified_communications_managerMatch6.1\(3b\)
ORciscounified_communications_managerMatch6.1\(3b\)su1
ORciscounified_communications_managerMatch6.1\(4\)
ORciscounified_communications_managerMatch6.1\(4\)su1
ORciscounified_communications_managerMatch6.1\(4a\)
ORciscounified_communications_managerMatch6.1\(4a\)su2
ORciscounified_communications_managerMatch6.1\(5\)
ORciscounified_communications_managerMatch6.1\(5\)su1
ORciscounified_communications_managerMatch6.1\(5\)su2
ORciscounified_communications_managerMatch6.1\(5\)su3
ORciscounified_communications_managerMatch7.0\(1\)su1
ORciscounified_communications_managerMatch7.0\(1\)su1a
ORciscounified_communications_managerMatch7.0\(2\)
ORciscounified_communications_managerMatch7.0\(2a\)
ORciscounified_communications_managerMatch7.0\(2a\)su1
ORciscounified_communications_managerMatch7.0\(2a\)su2
ORciscounified_communications_managerMatch7.1\(2a\)
ORciscounified_communications_managerMatch7.1\(2a\)su1
ORciscounified_communications_managerMatch7.1\(2b\)
ORciscounified_communications_managerMatch7.1\(2b\)su1
ORciscounified_communications_managerMatch7.1\(3\)
ORciscounified_communications_managerMatch7.1\(3a\)
ORciscounified_communications_managerMatch7.1\(3a\)su1
ORciscounified_communications_managerMatch7.1\(3a\)su1a
ORciscounified_communications_managerMatch7.1\(3b\)
ORciscounified_communications_managerMatch7.1\(3b\)su1
ORciscounified_communications_managerMatch7.1\(3b\)su2
ORciscounified_communications_managerMatch7.1\(5\)
ORciscounified_communications_managerMatch7.1\(5\)su1
ORciscounified_communications_managerMatch7.1\(5\)su1a
ORciscounified_communications_managerMatch7.1\(5a\)
ORciscounified_communications_managerMatch7.1\(5b\)
ORciscounified_communications_managerMatch7.1\(5b\)su1
ORciscounified_communications_managerMatch7.1\(5b\)su1a
ORciscounified_communications_managerMatch7.1\(5b\)su2
ORciscounified_communications_managerMatch7.1\(5b\)su3
ORciscounified_communications_managerMatch7.1\(5b\)su4
ORciscounified_communications_managerMatch7.1\(5b\)su5
ORciscounified_communications_managerMatch7.1\(5b\)su6
ORciscounified_communications_managerMatch8.0
ORciscounified_communications_managerMatch8.0\(1\)
ORciscounified_communications_managerMatch8.0\(2\)
ORciscounified_communications_managerMatch8.0\(2a\)
ORciscounified_communications_managerMatch8.0\(2b\)
ORciscounified_communications_managerMatch8.0\(2c\)
ORciscounified_communications_managerMatch8.0\(2c\)su1
ORciscounified_communications_managerMatch8.0\(3\)
ORciscounified_communications_managerMatch8.0\(3a\)
ORciscounified_communications_managerMatch8.0\(3a\)su1
ORciscounified_communications_managerMatch8.0\(3a\)su2
ORciscounified_communications_managerMatch8.0\(3a\)su3
ORciscounified_communications_managerMatch8.5
ORciscounified_communications_managerMatch8.5\(1\)
ORciscounified_communications_managerMatch8.5\(1\)su1
ORciscounified_communications_managerMatch8.5\(1\)su2
ORciscounified_communications_managerMatch8.5\(1\)su3
ORciscounified_communications_managerMatch8.5\(1\)su4
ORciscounified_communications_managerMatch8.5\(1\)su5
ORciscounified_communications_managerMatch8.6
ORciscounified_communications_managerMatch8.6\(1\)
ORciscounified_communications_managerMatch8.6\(1a\)
ORciscounified_communications_managerMatch8.6\(2\)
ORciscounified_communications_managerMatch8.6\(2a\)
ORciscounified_communications_managerMatch8.6\(2a\)su1
ORciscounified_communications_managerMatch8.6\(2a\)su2
ORciscounified_communications_managerMatch8.6\(2a\)su3
ORciscounified_communications_managerMatch8.6\(3\)
ORciscounified_communications_managerMatch8.6\(4\)
ORciscounified_communications_managerMatch9.0\(1\)
Related
nvd
nvd
CVE-2013-6688
2013-11-18 03:55:06
cisco
cisco
Cisco Enterprise License Manager Path Traversal Vulnerability
2013-11-13 22:10:08
prion
prion
Directory traversal
2013-11-18 03:55:00
cvelist
cvelist
CVE-2013-6688
2022-10-03 16:14:51
6.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:C/A:N
6.4 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.8%
Related for CVE-2013-6688