7.8

CVE-2013-1222

EPSS 1.23%
Veröffentlicht 09.05.2013 12:31:19
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to launch arbitrary custom web applications via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38379.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 4

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Unified Customer Voice Portal Version <= 9.0\(1\)

Cisco ≫ Unified Customer Voice Portal Version 3.0 Update sr1

Cisco ≫ Unified Customer Voice Portal Version 3.0 Update sr2

Cisco ≫ Unified Customer Voice Portal Version 4.0

Cisco ≫ Unified Customer Voice Portal Version 4.1

Cisco ≫ Unified Customer Voice Portal Version 7.0

Cisco ≫ Unified Customer Voice Portal Version 9.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.23%	0.65

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:C/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-1222

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-1222

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-1222

EUVD