Skip to main content

Unified Customer Voice Portal CVE-2013-1223

HIGH
Improper Input Validation (CWE-20)
2013-05-09 psirt@cisco.com
Information Disclosure Cisco Unified Customer Voice Portal
7.8
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:N/AC:L/Au:N/C:C/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
May 09, 2013 - 12:31 cve.org
HIGH 7.8

DescriptionCVE.org

The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.

AnalysisAI

The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372. Affected products include: Cisco Unified Customer Voice Portal. Version information: before 9.0.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Unified Customer Voice Portal

View all
CVE-2013-1221 CRITICAL
10.0 May 09

The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not prop
CVE-2017-12214 HIGH
8.8 Sep 21

A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality f
CVE-2018-0139 HIGH
8.6 Feb 22

A vulnerability in the Interactive Voice Response (IVR) management connection interface for Cisco Unified Customer Voice
CVE-2018-0086 HIGH
8.6 Jan 18

A vulnerability in the application server of the Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticate
CVE-2013-1225 HIGH
7.8 May 09

Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files vi
CVE-2013-1220 HIGH
7.8 May 09

The CallServer component in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attacker
CVE-2013-1222 HIGH
7.8 May 09

The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not prop
CVE-2013-1224 HIGH
7.8 May 09

Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9
CVE-2020-3402 HIGH
7.5 Jul 02

A vulnerability in the Java Remote Method Invocation (RMI) interface of Cisco Unified Customer Voice Portal (CVP) could

CVE-2015-0735 MEDIUM
6.8 May 17

Cross-site request forgery (CSRF) vulnerability in Cisco Unified Customer Voice Portal (CVP) 10.5(1) allows remote attac
CVE-2021-1599 MEDIUM
5.4 Jul 22

A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal (CVP) could allow an authen
CVE-2014-3325 MEDIUM
4.3 Jul 19

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2013-1223 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy