Lucene search
CiscoCVE-2013-1223HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-1223
2022-10-0316:14:47
CWE-20
cisco
web.nvd.nist.gov
30
cisco
unified customer voice portal
cvp software
cve-2013-1223
security vulnerability
remote attack
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.002
Percentile
55.9%
The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.
Affected configurations
Node
ciscounified_customer_voice_portalRange≤9.0\(1\)
ORciscounified_customer_voice_portalMatch3.0sr1
ORciscounified_customer_voice_portalMatch3.0sr2
ORciscounified_customer_voice_portalMatch3.6\(10\)es01
ORciscounified_customer_voice_portalMatch4.0
ORciscounified_customer_voice_portalMatch4.0\(2\)
ORciscounified_customer_voice_portalMatch4.0\(2\)sr1
ORciscounified_customer_voice_portalMatch4.1
ORciscounified_customer_voice_portalMatch7.0
ORciscounified_customer_voice_portalMatch7.0\(2\)
ORciscounified_customer_voice_portalMatch8.0\(1\)
ORciscounified_customer_voice_portalMatch8.5\(1\)
ORciscounified_customer_voice_portalMatch9.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_customer_voice_portal | 3.0 | cpe:/a:cisco:unified_customer_voice_portal:3.0:sr1:: |
| cisco | unified_customer_voice_portal | 7.0 | cpe:/a:cisco:unified_customer_voice_portal:7.0::: |
| cisco | unified_customer_voice_portal | 8.0%281%29 | cpe:/a:cisco:unified_customer_voice_portal:8.0%281%29::: |
| cisco | unified_customer_voice_portal | 9.0 | cpe:/a:cisco:unified_customer_voice_portal:9.0::: |
| cisco | unified_customer_voice_portal | 4.0%282%29 | cpe:/a:cisco:unified_customer_voice_portal:4.0%282%29:sr1:: |
| cisco | unified_customer_voice_portal | 4.1 | cpe:/a:cisco:unified_customer_voice_portal:4.1::: |
| cisco | unified_customer_voice_portal | 3.6%2810%29 | cpe:/a:cisco:unified_customer_voice_portal:3.6%2810%29:es01:: |
| cisco | unified_customer_voice_portal | 8.5%281%29 | cpe:/a:cisco:unified_customer_voice_portal:8.5%281%29::: |
| cisco | unified_customer_voice_portal | 3.0 | cpe:/a:cisco:unified_customer_voice_portal:3.0:sr2:: |
| cisco | unified_customer_voice_portal | 4.0 | cpe:/a:cisco:unified_customer_voice_portal:4.0::: |
Related
cvelist
cvelist
CVE-2013-1223
2022-10-03 16:14:47
nvd
nvd
CVE-2013-1223
2013-05-09 12:31:19
prion
prion
Cross site request forgery (csrf)
2013-05-09 12:31:00
securityvulns
securityvulns
Cisco Unified Customer Voice Portal multiple security vulnerabilities
2013-05-10 00:00:00
cisco
cisco
Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software
2013-05-08 16:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.002
Percentile
55.9%
Related for CVE-2013-1223