6.8
CVE-2013-3406
- EPSS 1.13%
- Veröffentlicht 18.11.2013 03:55:05
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle psirt@cisco.com
- CVE-Watchlists
- Unerledigt
LoginThe "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCug65687.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Service Portal Version9.4.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.13% | 0.621 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8 | 6.9 |
AV:N/AC:L/Au:S/C:C/I:N/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3406
http://tools.cisco.com/security/center/viewAlert.x?alertId=31775