CVE-2013-5528 EXPLOIT
4.0
MEDIUM · CVSS 2.0 · EPSS 23.3% (pctl 98)
Patch early
A public exploit exists.
Description
Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.
Scoring
| CVSS | 4.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:P/I:N/A:N |
| EPSS | 23.31% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2013-10-11 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| cisco | unified communications manager |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Cisco Unified Communications Manager 7/8/9 - Directory Traversal | 2016-12-07 |
References
- http://osvdb.org/98336
- http://packetstormsecurity.com/files/140071/Cisco-Unified-Communications-Manager-7-8-9-Directory-Traversal.html
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5528
- http://www.securityfocus.com/bid/62960
- https://www.exploit-db.com/exploits/40887/
- http://osvdb.org/98336
- http://packetstormsecurity.com/files/140071/Cisco-Unified-Communications-Manager-7-8-9-Directory-Traversal.html
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5528
- http://www.securityfocus.com/bid/62960
- https://www.exploit-db.com/exploits/40887/
→ the Explorer · watch your stack · NVD