NVD

Id
37466  
Name
CVE-2013-1222  
Description
The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to launch arbitrary custom web applications via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38379.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-18  
Published
2013-05-09  
Modified Date
2013-05-09  
Seq
2013-1222  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
190939 37466 CVE-2013-1222 20130508 Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21038 JVNDB-2013-002613 Cisco Unified Customer Voice Portal の Tomcat Web Management 機能における任意のカスタム Web アプリケーションを起動される脆弱性 Cisco Unified Customer Voice Portal (CVP) の Tomcat Web Management 機能は、Tomcat コンポーネントを適切に設定しないため、任意のカスタム Web アプリケーションを起動される脆弱性が存在します。 CVE-2013-1222 61164 CVE-2013-1222 37466 7.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002613.html 2013-05-08 2013-05-10 View