CVE-2013-1225 | BDVDB-2026-55759 Detail

Description#

Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager (1) HTTP or (2) HTTPS request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCub38366.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp

Exploit#

No public exploit known

History#

Version 12013-05-09Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.