Path Traversal in Cisco Unified Customer Voice Portal

CVE-2013-1224

Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.021 (80.6th percentile) — read the EPSS interpretation.