Improper input validation in Cisco Unified_customer_voice_portal
CVE-2018-0139
A vulnerability in the Interactive Voice Response (IVR) management connection interface for Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to cause the IVR connection to disconnect, creating a sys…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.023 (81.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.
Affected products
- Cisco Unified_customer_voice_portal — versions 11.5\(1\), 11.6
- N/a Cisco Unified Customer Voice Portal — versions Cisco Unified Customer Voice Portal
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2018-0139?
- CVE-2018-0139 is a high-severity vulnerability in Cisco Unified_customer_voice_portal, classified under Improper Input Validation. CVSS score: 8.6/10. Published 2018-02-22.
- How severe is CVE-2018-0139?
- High severity. CVSS v3 base score is 8.6 out of 10.