CVE Vulnerabilities

CVE-2013-1225

Published: May 09, 2013 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:C/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager (1) HTTP or (2) HTTPS request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCub38366.

Affected Software

Name Vendor Start Version End Version
Unified_customer_voice_portal Cisco * 9.0(1) (including)
Unified_customer_voice_portal Cisco 3.0-sr1 (including) 3.0-sr1 (including)
Unified_customer_voice_portal Cisco 3.0-sr2 (including) 3.0-sr2 (including)
Unified_customer_voice_portal Cisco 3.6(10)-es01 (including) 3.6(10)-es01 (including)
Unified_customer_voice_portal Cisco 4.0 (including) 4.0 (including)
Unified_customer_voice_portal Cisco 4.0(2) (including) 4.0(2) (including)
Unified_customer_voice_portal Cisco 4.0(2)-sr1 (including) 4.0(2)-sr1 (including)
Unified_customer_voice_portal Cisco 4.1 (including) 4.1 (including)
Unified_customer_voice_portal Cisco 7.0 (including) 7.0 (including)
Unified_customer_voice_portal Cisco 7.0(2) (including) 7.0(2) (including)
Unified_customer_voice_portal Cisco 8.0(1) (including) 8.0(1) (including)
Unified_customer_voice_portal Cisco 8.5(1) (including) 8.5(1) (including)
Unified_customer_voice_portal Cisco 9.0 (including) 9.0 (including)

References