Lucene search
HistoryMay 09, 2013 - 12:31 p.m.
CVE-2013-1223
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.9%
The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.
Affected configurations
Node
ciscounified_customer_voice_portalRange≤9.0\(1\)
ORciscounified_customer_voice_portalMatch3.0sr1
ORciscounified_customer_voice_portalMatch3.0sr2
ORciscounified_customer_voice_portalMatch3.6\(10\)es01
ORciscounified_customer_voice_portalMatch4.0
ORciscounified_customer_voice_portalMatch4.0\(2\)
ORciscounified_customer_voice_portalMatch4.0\(2\)sr1
ORciscounified_customer_voice_portalMatch4.1
ORciscounified_customer_voice_portalMatch7.0
ORciscounified_customer_voice_portalMatch7.0\(2\)
ORciscounified_customer_voice_portalMatch8.0\(1\)
ORciscounified_customer_voice_portalMatch8.5\(1\)
ORciscounified_customer_voice_portalMatch9.0
Related
cvelist
cvelist
CVE-2013-1223
2022-10-03 16:14:47
prion
prion
Cross site request forgery (csrf)
2013-05-09 12:31:00
cve
cve
CVE-2013-1223
2022-10-03 16:14:47
cisco
cisco
Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software
2013-05-08 16:00:00
securityvulns
securityvulns
Cisco Unified Customer Voice Portal multiple security vulnerabilities
2013-05-10 00:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.9%
Related for NVD:CVE-2013-1223