Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-6688
HistoryNov 18, 2013 - 3:55 a.m.

CVE-2013-6688

2013-11-1803:55:06
CWE-22
[email protected]
web.nvd.nist.gov

6.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:C/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.9%

JSON

Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222.

Affected configurations

NVD
Node
ciscounified_communications_managerRange≤9.1\(1\)
OR
ciscounified_communications_managerMatch3.3\(5\)
OR
ciscounified_communications_managerMatch3.3\(5\)sr1
OR
ciscounified_communications_managerMatch3.3\(5\)sr2a
OR
ciscounified_communications_managerMatch4.1\(3\)
OR
ciscounified_communications_managerMatch4.1\(3\)sr1
OR
ciscounified_communications_managerMatch4.1\(3\)sr2
OR
ciscounified_communications_managerMatch4.1\(3\)sr3
OR
ciscounified_communications_managerMatch4.1\(3\)sr4
OR
ciscounified_communications_managerMatch4.2
OR
ciscounified_communications_managerMatch4.2.1
OR
ciscounified_communications_managerMatch4.2.2
OR
ciscounified_communications_managerMatch4.2.3
OR
ciscounified_communications_managerMatch4.2.3sr1
OR
ciscounified_communications_managerMatch4.2.3sr2
OR
ciscounified_communications_managerMatch4.2.3sr2b
OR
ciscounified_communications_managerMatch4.3
OR
ciscounified_communications_managerMatch4.3\(1\)
OR
ciscounified_communications_managerMatch5.0
OR
ciscounified_communications_managerMatch5.1
OR
ciscounified_communications_managerMatch5.1\(1\)
OR
ciscounified_communications_managerMatch5.1\(1b\)
OR
ciscounified_communications_managerMatch5.1\(1c\)
OR
ciscounified_communications_managerMatch5.1\(2\)
OR
ciscounified_communications_managerMatch5.1\(2a\)
OR
ciscounified_communications_managerMatch5.1\(2b\)
OR
ciscounified_communications_managerMatch5.1\(3\)
OR
ciscounified_communications_managerMatch5.1\(3a\)
OR
ciscounified_communications_managerMatch5.1\(3c\)
OR
ciscounified_communications_managerMatch5.1\(3d\)
OR
ciscounified_communications_managerMatch5.1\(3e\)
OR
ciscounified_communications_managerMatch5.1.2
OR
ciscounified_communications_managerMatch6.0
OR
ciscounified_communications_managerMatch6.0\(1\)
OR
ciscounified_communications_managerMatch6.0\(1a\)
OR
ciscounified_communications_managerMatch6.0\(1b\)
OR
ciscounified_communications_managerMatch6.1\(1\)
OR
ciscounified_communications_managerMatch6.1\(1a\)
OR
ciscounified_communications_managerMatch6.1\(1b\)
OR
ciscounified_communications_managerMatch6.1\(2\)
OR
ciscounified_communications_managerMatch6.1\(2\)su1
OR
ciscounified_communications_managerMatch6.1\(2\)su1a
OR
ciscounified_communications_managerMatch6.1\(3\)
OR
ciscounified_communications_managerMatch6.1\(3a\)
OR
ciscounified_communications_managerMatch6.1\(3b\)
OR
ciscounified_communications_managerMatch6.1\(3b\)su1
OR
ciscounified_communications_managerMatch6.1\(4\)
OR
ciscounified_communications_managerMatch6.1\(4\)su1
OR
ciscounified_communications_managerMatch6.1\(4a\)
OR
ciscounified_communications_managerMatch6.1\(4a\)su2
OR
ciscounified_communications_managerMatch6.1\(5\)
OR
ciscounified_communications_managerMatch6.1\(5\)su1
OR
ciscounified_communications_managerMatch6.1\(5\)su2
OR
ciscounified_communications_managerMatch6.1\(5\)su3
OR
ciscounified_communications_managerMatch7.0\(1\)su1
OR
ciscounified_communications_managerMatch7.0\(1\)su1a
OR
ciscounified_communications_managerMatch7.0\(2\)
OR
ciscounified_communications_managerMatch7.0\(2a\)
OR
ciscounified_communications_managerMatch7.0\(2a\)su1
OR
ciscounified_communications_managerMatch7.0\(2a\)su2
OR
ciscounified_communications_managerMatch7.1\(2a\)
OR
ciscounified_communications_managerMatch7.1\(2a\)su1
OR
ciscounified_communications_managerMatch7.1\(2b\)
OR
ciscounified_communications_managerMatch7.1\(2b\)su1
OR
ciscounified_communications_managerMatch7.1\(3\)
OR
ciscounified_communications_managerMatch7.1\(3a\)
OR
ciscounified_communications_managerMatch7.1\(3a\)su1
OR
ciscounified_communications_managerMatch7.1\(3a\)su1a
OR
ciscounified_communications_managerMatch7.1\(3b\)
OR
ciscounified_communications_managerMatch7.1\(3b\)su1
OR
ciscounified_communications_managerMatch7.1\(3b\)su2
OR
ciscounified_communications_managerMatch7.1\(5\)
OR
ciscounified_communications_managerMatch7.1\(5\)su1
OR
ciscounified_communications_managerMatch7.1\(5\)su1a
OR
ciscounified_communications_managerMatch7.1\(5a\)
OR
ciscounified_communications_managerMatch7.1\(5b\)
OR
ciscounified_communications_managerMatch7.1\(5b\)su1
OR
ciscounified_communications_managerMatch7.1\(5b\)su1a
OR
ciscounified_communications_managerMatch7.1\(5b\)su2
OR
ciscounified_communications_managerMatch7.1\(5b\)su3
OR
ciscounified_communications_managerMatch7.1\(5b\)su4
OR
ciscounified_communications_managerMatch7.1\(5b\)su5
OR
ciscounified_communications_managerMatch7.1\(5b\)su6
OR
ciscounified_communications_managerMatch8.0
OR
ciscounified_communications_managerMatch8.0\(1\)
OR
ciscounified_communications_managerMatch8.0\(2\)
OR
ciscounified_communications_managerMatch8.0\(2a\)
OR
ciscounified_communications_managerMatch8.0\(2b\)
OR
ciscounified_communications_managerMatch8.0\(2c\)
OR
ciscounified_communications_managerMatch8.0\(2c\)su1
OR
ciscounified_communications_managerMatch8.0\(3\)
OR
ciscounified_communications_managerMatch8.0\(3a\)
OR
ciscounified_communications_managerMatch8.0\(3a\)su1
OR
ciscounified_communications_managerMatch8.0\(3a\)su2
OR
ciscounified_communications_managerMatch8.0\(3a\)su3
OR
ciscounified_communications_managerMatch8.5
OR
ciscounified_communications_managerMatch8.5\(1\)
OR
ciscounified_communications_managerMatch8.5\(1\)su1
OR
ciscounified_communications_managerMatch8.5\(1\)su2
OR
ciscounified_communications_managerMatch8.5\(1\)su3
OR
ciscounified_communications_managerMatch8.5\(1\)su4
OR
ciscounified_communications_managerMatch8.5\(1\)su5
OR
ciscounified_communications_managerMatch8.6
OR
ciscounified_communications_managerMatch8.6\(1\)
OR
ciscounified_communications_managerMatch8.6\(1a\)
OR
ciscounified_communications_managerMatch8.6\(2\)
OR
ciscounified_communications_managerMatch8.6\(2a\)
OR
ciscounified_communications_managerMatch8.6\(2a\)su1
OR
ciscounified_communications_managerMatch8.6\(2a\)su2
OR
ciscounified_communications_managerMatch8.6\(2a\)su3
OR
ciscounified_communications_managerMatch8.6\(3\)
OR
ciscounified_communications_managerMatch8.6\(4\)
OR
ciscounified_communications_managerMatch9.0\(1\)

Related

cve 1
cisco 1
prion 1
cvelist 1
cve
cve
CVE-2013-6688
2022-10-03 16:14:51
cisco
cisco
Cisco Enterprise License Manager Path Traversal Vulnerability
2013-11-13 22:10:08
prion
prion
Directory traversal
2013-11-18 03:55:00
cvelist
cvelist
CVE-2013-6688
2022-10-03 16:14:51

6.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:C/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.9%

JSON
Related for NVD:CVE-2013-6688
cve1cisco1prion1cvelist1