CVE-2013-1221

EUVD-2013-1261
The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to execute arbitrary code via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38384.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
Affected Products (NVD)
VendorProductVersion
ciscounified_customer_voice_portal
𝑥
≤ 9.0\(1\)
ciscounified_customer_voice_portal
3.0:sr1
ciscounified_customer_voice_portal
3.0:sr2
ciscounified_customer_voice_portal
3.6\(10\):es01
ciscounified_customer_voice_portal
4.0
ciscounified_customer_voice_portal
4.0\(2\)
ciscounified_customer_voice_portal
4.0\(2\):sr1
ciscounified_customer_voice_portal
4.1
ciscounified_customer_voice_portal
7.0
ciscounified_customer_voice_portal
7.0\(2\)
ciscounified_customer_voice_portal
8.0\(1\)
ciscounified_customer_voice_portal
8.5\(1\)
ciscounified_customer_voice_portal
9.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp