Improper input validation in Cisco Service Portal

CVE-2013-3406

The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCug65687.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.011 (63.0th percentile) — read the EPSS interpretation.