CVE-2013-1224

2022-10-0316:14:49

cisco

www.cve.org

cisco

directory traversal

remote attackers

arbitrary files

http

https

parameter validation

bug id

vulnerability

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.6%

JSON

Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369.