VULNERABILITY INTELLIGENCE

CVE-2013-6688

CVSS score6.3 MEDIUM
EPSS probability2.13%
CISA KEVNot currently listed
Published2013-11-18
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:N/I:C/A:N

Description

Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references