VULNERABILITY INTELLIGENCE
CVE-2013-1245
CVSS score4 MEDIUM
EPSS probability1.00%
CISA KEVNot currently listed
Published2013-05-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:N
Description
The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID CSCue67190.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- psirt@cisco.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory