Published: 09/05/2013 Updated: 09/05/2013

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

Subscribe to Unified Customer Voice Portal

The log viewer in Cisco Unified Customer Voice Portal (CVP) Software prior to 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote malicious users to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco unified customer voice portal 4.1
cisco unified customer voice portal 9.0
cisco unified customer voice portal 8.0\\(1\\)
cisco unified customer voice portal
cisco unified customer voice portal 7.0\\(2\\)
cisco unified customer voice portal 4.0\\(2\\)
cisco unified customer voice portal 3.0
cisco unified customer voice portal 4.0
cisco unified customer voice portal 7.0
cisco unified customer voice portal 8.5\\(1\\)
cisco unified customer voice portal 3.6\\(10\\)

Cisco Unified Customer Voice Portal Software (Unified CVP) contains multiple vulnerabilities Various components of Cisco Unified CVP are affected; see the "Details" section for more information on the vulnerabilities These vulnerabilities can be exploited independently; however, more than one vulnerability could be exploited on the same device ...

CWE-20 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-1223

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect