THREATPORT/VULNERABILITY/CVE-2013-5528
MEDIUM SEVERITY

CVE-2013-5528

Unified Communications Manager vulnerability

CVSS
4.0
EPSS
23.3%
EPSS pct
98th
Exploited
No known
Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.
Affected vendor
Cisco
Affected product
Unified Communications Manager
CVSS vector
AV:N/AC:L/Au:S/C:P/I:N/A:N
Weakness type (CWE)
Published
2013-10-11

Risk analysis

Based on its CVSS vector, this vulnerability is exploitable over the network, low attack complexity, requiring single-factor authentication. Successful exploitation leads to partial impact to confidentiality.

Its EPSS score of 23.3% reflects a moderate probability of exploitation activity in the wild over the next 30 days, placing it above 98% of all scored CVEs.

Check your external exposure to CVE-2013-5528

  • Confirm whether Cisco Unified Communications Manager is running on any internet-facing host or subdomain.
  • Match discovered service fingerprints against the version affected by CVE-2013-5528.
  • Prioritise remediation if the asset is public, business-critical, or near authentication/payment flows.

How ThreatPort helps with CVE-2013-5528

ThreatPort's external attack surface scanner checks your internet-facing assets — agentlessly, from the outside in — for the exposed services and versions that CVE-2013-5528 affects, then prioritises the finding by real risk using CISA KEV and FIRST.org EPSS.

Run a free external exposure scan

Are you exposed to CVE-2013-5528?

Run an instant, non-intrusive external scan to check your attack surface for CVE-2013-5528.

Start free scan

No credit card. Agentless.

Related vulnerabilities

MEDIUM
CVE-2016-5844
Libarchive vulnerability
MEDIUM
CVE-2016-4708
Iphone Os vulnerability
MEDIUM
CVE-2016-6172
Leap vulnerability