Lucene search
CiscoCVE-2009-2047HistoryJul 16, 2009 - 3:30 p.m.
CVE-2009-2047
2009-07-1615:30:00
CWE-22
cisco
web.nvd.nist.gov
30
cisco
crs
directory traversal
vulnerability
administration interface
cisco unified contact center express
ccx
cve-2009-2047
nvd
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.4
Confidence
Low
EPSS
0.005
Percentile
75.4%
Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors.
Affected configurations
Node
ciscocrsMatch3.5
ORciscocrsMatch4.0
ORciscocrsMatch4.1
ORciscocrsMatch4.5
ORciscocrsMatch5.0
ORciscocrsMatch6.0
ORciscocrsMatch7.0
ORciscocustomer_response_applicationsMatch3.5
ORciscoip_qmMatch3.5
ORciscounified_ccxMatch3.5
ORciscounified_ccxMatch4.0\(1\)
ORciscounified_ccxMatch4.0\(3\)
ORciscounified_ccxMatch4.0\(4\)
ORciscounified_ccxMatch4.0\(5\)
ORciscounified_ccxMatch4.0\(5a\)
ORciscounified_ccxMatch4.5\(1\)
ORciscounified_ccxMatch4.5\(2\)
ORciscounified_ccxMatch5.0\(1\)
ORciscounified_ccxMatch6.0\(1\)
ORciscounified_ccxMatch7.0\(1\)
ORciscounified_ip_contact_center_expressMatch3.0
ORciscounified_ip_contact_center_expressMatch5.0\(1\)
ORciscounified_ip_contact_center_expressMatch6.0\(1\)
ORciscounified_ip_contact_center_expressMatch7.0
ORciscounified_ip_ivrMatch3.0
ORciscounified_ip_ivrMatch3.1
ORciscounified_ip_ivrMatch4.0
ORciscounified_ip_ivrMatch4.1
ORciscounified_ip_ivrMatch4.5
ORciscounified_ip_ivrMatch5.0
ORciscounified_ip_ivrMatch6.0
ORciscounified_ip_ivrMatch7.0
ORciscounified_ip_ivrMatch7.0\(1\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | crs | 3.5 | cpe:2.3:a:cisco:crs:3.5:*:*:*:*:*:*:* |
| cisco | crs | 4.0 | cpe:2.3:a:cisco:crs:4.0:*:*:*:*:*:*:* |
| cisco | crs | 4.1 | cpe:2.3:a:cisco:crs:4.1:*:*:*:*:*:*:* |
| cisco | crs | 4.5 | cpe:2.3:a:cisco:crs:4.5:*:*:*:*:*:*:* |
| cisco | crs | 5.0 | cpe:2.3:a:cisco:crs:5.0:*:*:*:*:*:*:* |
| cisco | crs | 6.0 | cpe:2.3:a:cisco:crs:6.0:*:*:*:*:*:*:* |
| cisco | crs | 7.0 | cpe:2.3:a:cisco:crs:7.0:*:*:*:*:*:*:* |
| cisco | customer_response_applications | 3.5 | cpe:2.3:a:cisco:customer_response_applications:3.5:*:*:*:*:*:*:* |
| cisco | ip_qm | 3.5 | cpe:2.3:a:cisco:ip_qm:3.5:*:*:*:*:*:*:* |
| cisco | unified_ccx | 3.5 | cpe:2.3:a:cisco:unified_ccx:3.5:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2009-2047
2009-07-16 15:00:00
prion
prion
Directory traversal
2009-07-16 15:30:00
nvd
nvd
CVE-2009-2047
2009-07-16 15:30:00
cisco
cisco
Vulnerabilities in Unified Contact Center Express Administration Pages
2009-07-15 16:00:00
securityvulns
securityvulns
rapid7blog
rapid7blog
NICER Protocol Deep Dive: Internet Exposure of HTTP and HTTPS
2021-01-29 14:20:22
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.4
Confidence
Low
EPSS
0.005
Percentile
75.4%
Related for CVE-2009-2047