10

CVE-2013-1221

EPSS 6.26%
Veröffentlicht 09.05.2013 12:31:19
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to execute arbitrary code via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38384.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Unified Customer Voice Portal Version <= 9.0\(1\)

Cisco ≫ Unified Customer Voice Portal Version3.0 Updatesr1

Cisco ≫ Unified Customer Voice Portal Version3.0 Updatesr2

Cisco ≫ Unified Customer Voice Portal Version4.0

Cisco ≫ Unified Customer Voice Portal Version4.1

Cisco ≫ Unified Customer Voice Portal Version7.0

Cisco ≫ Unified Customer Voice Portal Version9.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	6.26%	0.899

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-1221

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-1221

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-1221

EUVD