CiscoUnified Customer Voice Portal (CVP) Software 3.6(10)ES01
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:unified_customer_voice_portal:3.6\(10\):es01:*:*:*:*:*:*part: a version: 3.6(10) update: es01
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Unified Customer Voice Portal (589d81b4-d57f-535d-9cf9-39d9108af74e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-1225 |
vulnerable | 2026-06-08 05:03:53.182059 |
Details available
Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager (1) HTTP or (2) HTTPS request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCub38366.
Published: 2013-05-09T10:00:00.000Z
Updated: 2024-09-16T19:35:44.621Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1224 |
vulnerable | 2026-06-08 05:03:53.181437 |
Details available
Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369.
Published: 2013-05-09T10:00:00.000Z
Updated: 2024-09-16T17:29:08.883Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1223 |
vulnerable | 2026-06-08 05:03:53.180909 |
Details available
The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.
Published: 2013-05-09T10:00:00.000Z
Updated: 2024-09-16T20:52:00.771Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1222 |
vulnerable | 2026-06-08 05:03:53.180379 |
Details available
The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to launch arbitrary custom web applications via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38379.
Published: 2013-05-09T10:00:00.000Z
Updated: 2024-09-16T18:13:18.544Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1221 |
vulnerable | 2026-06-08 05:03:53.179818 |
Details available
The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to execute arbitrary code via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38384.
Published: 2013-05-09T10:00:00.000Z
Updated: 2024-09-17T03:23:57.564Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1220 |
vulnerable | 2026-06-08 05:03:53.174320 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.