CVE-2013-5528

MEDIUM 4.0CVE-2013-5528 · Published 11/10/2013 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.

References

osvdb.org/98336 · Broken Link
packetstormsecurity.com/files/140071/Cisco-Unified-Communications-Manager-7-8-9-Directory-Traversal.html · Exploit
tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5528 · Vendor Advisory
securityfocus.com/bid/62960 · Third Party Advisory
exploit-db.com/exploits/40887 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free