10

CVE-2013-1221

EPSS 3.44%
Veröffentlicht 09.05.2013 12:31:19
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to execute arbitrary code via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38384.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 4

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Unified Customer Voice Portal Version <= 9.0\(1\)

Cisco ≫ Unified Customer Voice Portal Version 3.0 Update sr1

Cisco ≫ Unified Customer Voice Portal Version 3.0 Update sr2

Cisco ≫ Unified Customer Voice Portal Version 4.0

Cisco ≫ Unified Customer Voice Portal Version 4.1

Cisco ≫ Unified Customer Voice Portal Version 7.0

Cisco ≫ Unified Customer Voice Portal Version 9.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.44%	0.874

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-1221

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-1221

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-1221

EUVD