VULNERABILITY INTELLIGENCE

CVE-2013-1120

CVSS score6.8 MEDIUM
EPSS probability1.20%
CISA KEVNot currently listed
Published2013-02-06
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software before 8.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCue35910.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references