CVE-2011-3315

Published Oct 27, 2011 CVSS 2.0 · 7.8 High EPSS 25.7% KEV · Not listed
Description
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Sep 17, 2024, 2:31 AM
Reserved
Aug 29, 2011, 12:00 AM
Status
Modified
Published
Oct 27, 2011, 9:55 PM
Modified
Jun 16, 2026, 11:33 PM