CVE-2013-5534

Severity CVSS v4.0:
Pending analysis
Type:
CWE-22 Path Traversal
Publication date:
19/10/2013
Last modified:
11/04/2025

Description

Directory traversal vulnerability in the attachment service in the Voice Message Web Service (aka VMWS or Cisco Unity Web Service) in Cisco Unity Connection allows remote authenticated users to create files, and consequently execute arbitrary JSP code, via a crafted pathname for a file that is not a valid audio file, aka Bug ID CSCuj22948.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:cisco:unity_connection:-:*:*:*:*:*:*:*