Lucene search
CiscoCVE-2013-1222HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-1222
2022-10-0316:14:48
CWE-16
cisco
web.nvd.nist.gov
25
cisco
cvp
web management
cve-2013-1222
tomcat
remote attackers
http
https
vulnerability
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:C/A:N
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
48.8%
The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to launch arbitrary custom web applications via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38379.
Affected configurations
Node
ciscounified_customer_voice_portalRange≤9.0\(1\)
ORciscounified_customer_voice_portalMatch3.0sr1
ORciscounified_customer_voice_portalMatch3.0sr2
ORciscounified_customer_voice_portalMatch3.6\(10\)es01
ORciscounified_customer_voice_portalMatch4.0
ORciscounified_customer_voice_portalMatch4.0\(2\)
ORciscounified_customer_voice_portalMatch4.0\(2\)sr1
ORciscounified_customer_voice_portalMatch4.1
ORciscounified_customer_voice_portalMatch7.0
ORciscounified_customer_voice_portalMatch7.0\(2\)
ORciscounified_customer_voice_portalMatch8.0\(1\)
ORciscounified_customer_voice_portalMatch8.5\(1\)
ORciscounified_customer_voice_portalMatch9.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_customer_voice_portal | 3.0 | cpe:/a:cisco:unified_customer_voice_portal:3.0:sr1:: |
| cisco | unified_customer_voice_portal | 7.0 | cpe:/a:cisco:unified_customer_voice_portal:7.0::: |
| cisco | unified_customer_voice_portal | 8.0%281%29 | cpe:/a:cisco:unified_customer_voice_portal:8.0%281%29::: |
| cisco | unified_customer_voice_portal | 9.0 | cpe:/a:cisco:unified_customer_voice_portal:9.0::: |
| cisco | unified_customer_voice_portal | 4.0%282%29 | cpe:/a:cisco:unified_customer_voice_portal:4.0%282%29:sr1:: |
| cisco | unified_customer_voice_portal | 4.1 | cpe:/a:cisco:unified_customer_voice_portal:4.1::: |
| cisco | unified_customer_voice_portal | 3.6%2810%29 | cpe:/a:cisco:unified_customer_voice_portal:3.6%2810%29:es01:: |
| cisco | unified_customer_voice_portal | 8.5%281%29 | cpe:/a:cisco:unified_customer_voice_portal:8.5%281%29::: |
| cisco | unified_customer_voice_portal | 3.0 | cpe:/a:cisco:unified_customer_voice_portal:3.0:sr2:: |
| cisco | unified_customer_voice_portal | 4.0 | cpe:/a:cisco:unified_customer_voice_portal:4.0::: |
Related
prion
prion
Cross site request forgery (csrf)
2013-05-09 12:31:00
cvelist
cvelist
CVE-2013-1222
2022-10-03 16:14:48
nvd
nvd
CVE-2013-1222
2013-05-09 12:31:19
securityvulns
securityvulns
Cisco Unified Customer Voice Portal multiple security vulnerabilities
2013-05-10 00:00:00
cisco
cisco
Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software
2013-05-08 16:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:C/A:N
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
48.8%
Related for CVE-2013-1222