CVE-2013-6688

medium

Published 2013-11-18 · Modified 2026-04-29

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

—

CVSS v4 NEW

—

not yet in upstream

VIR risk

6.3

Description

Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact

Vendor	Product	Versions
cisco	unified_communications_manager	`{"endIncluding":"9.1\\(1\\)"}`
cisco	unified_communications_manager	`3.3\(5\)`
cisco	unified_communications_manager	`3.3\(5\)sr1`
cisco	unified_communications_manager	`3.3\(5\)sr2a`
cisco	unified_communications_manager	`4.1\(3\)`
cisco	unified_communications_manager	`4.1\(3\)sr1`
cisco	unified_communications_manager	`4.1\(3\)sr2`
cisco	unified_communications_manager	`4.1\(3\)sr3`
cisco	unified_communications_manager	`4.1\(3\)sr4`
cisco	unified_communications_manager	`4.2`
cisco	unified_communications_manager	`4.2.1`
cisco	unified_communications_manager	`4.2.2`
cisco	unified_communications_manager	`4.2.3`
cisco	unified_communications_manager	`4.2.3sr1`
cisco	unified_communications_manager	`4.2.3sr2`
cisco	unified_communications_manager	`4.2.3sr2b`
cisco	unified_communications_manager	`4.3`
cisco	unified_communications_manager	`4.3\(1\)`
cisco	unified_communications_manager	`5.0`
cisco	unified_communications_manager	`5.1`
cisco	unified_communications_manager	`5.1\(1\)`
cisco	unified_communications_manager	`5.1\(1b\)`
cisco	unified_communications_manager	`5.1\(1c\)`
cisco	unified_communications_manager	`5.1\(2\)`
cisco	unified_communications_manager	`5.1\(2a\)`
cisco	unified_communications_manager	`5.1\(2b\)`
cisco	unified_communications_manager	`5.1\(3\)`
cisco	unified_communications_manager	`5.1\(3a\)`
cisco	unified_communications_manager	`5.1\(3c\)`
cisco	unified_communications_manager	`5.1\(3d\)`
cisco	unified_communications_manager	`5.1\(3e\)`
cisco	unified_communications_manager	`5.1.2`
cisco	unified_communications_manager	`6.0`
cisco	unified_communications_manager	`6.0\(1\)`
cisco	unified_communications_manager	`6.0\(1a\)`
cisco	unified_communications_manager	`6.0\(1b\)`
cisco	unified_communications_manager	`6.1\(1\)`
cisco	unified_communications_manager	`6.1\(1a\)`
cisco	unified_communications_manager	`6.1\(1b\)`
cisco	unified_communications_manager	`6.1\(2\)`
cisco	unified_communications_manager	`6.1\(2\)su1`
cisco	unified_communications_manager	`6.1\(2\)su1a`
cisco	unified_communications_manager	`6.1\(3\)`
cisco	unified_communications_manager	`6.1\(3a\)`
cisco	unified_communications_manager	`6.1\(3b\)`
cisco	unified_communications_manager	`6.1\(3b\)su1`
cisco	unified_communications_manager	`6.1\(4\)`
cisco	unified_communications_manager	`6.1\(4\)su1`
cisco	unified_communications_manager	`6.1\(4a\)`
cisco	unified_communications_manager	`6.1\(4a\)su2`
cisco	unified_communications_manager	`6.1\(5\)`
cisco	unified_communications_manager	`6.1\(5\)su1`
cisco	unified_communications_manager	`6.1\(5\)su2`
cisco	unified_communications_manager	`6.1\(5\)su3`
cisco	unified_communications_manager	`7.0\(1\)su1`
cisco	unified_communications_manager	`7.0\(1\)su1a`
cisco	unified_communications_manager	`7.0\(2\)`
cisco	unified_communications_manager	`7.0\(2a\)`
cisco	unified_communications_manager	`7.0\(2a\)su1`
cisco	unified_communications_manager	`7.0\(2a\)su2`
cisco	unified_communications_manager	`7.1\(2a\)`
cisco	unified_communications_manager	`7.1\(2a\)su1`
cisco	unified_communications_manager	`7.1\(2b\)`
cisco	unified_communications_manager	`7.1\(2b\)su1`
cisco	unified_communications_manager	`7.1\(3\)`
cisco	unified_communications_manager	`7.1\(3a\)`
cisco	unified_communications_manager	`7.1\(3a\)su1`
cisco	unified_communications_manager	`7.1\(3a\)su1a`
cisco	unified_communications_manager	`7.1\(3b\)`
cisco	unified_communications_manager	`7.1\(3b\)su1`
cisco	unified_communications_manager	`7.1\(3b\)su2`
cisco	unified_communications_manager	`7.1\(5\)`
cisco	unified_communications_manager	`7.1\(5\)su1`
cisco	unified_communications_manager	`7.1\(5\)su1a`
cisco	unified_communications_manager	`7.1\(5a\)`
cisco	unified_communications_manager	`7.1\(5b\)`
cisco	unified_communications_manager	`7.1\(5b\)su1`
cisco	unified_communications_manager	`7.1\(5b\)su1a`
cisco	unified_communications_manager	`7.1\(5b\)su2`
cisco	unified_communications_manager	`7.1\(5b\)su3`
cisco	unified_communications_manager	`7.1\(5b\)su4`
cisco	unified_communications_manager	`7.1\(5b\)su5`
cisco	unified_communications_manager	`7.1\(5b\)su6`
cisco	unified_communications_manager	`8.0`
cisco	unified_communications_manager	`8.0\(1\)`
cisco	unified_communications_manager	`8.0\(2\)`
cisco	unified_communications_manager	`8.0\(2a\)`
cisco	unified_communications_manager	`8.0\(2b\)`
cisco	unified_communications_manager	`8.0\(2c\)`
cisco	unified_communications_manager	`8.0\(2c\)su1`
cisco	unified_communications_manager	`8.0\(3\)`
cisco	unified_communications_manager	`8.0\(3a\)`
cisco	unified_communications_manager	`8.0\(3a\)su1`
cisco	unified_communications_manager	`8.0\(3a\)su2`
cisco	unified_communications_manager	`8.0\(3a\)su3`
cisco	unified_communications_manager	`8.5`
cisco	unified_communications_manager	`8.5\(1\)`
cisco	unified_communications_manager	`8.5\(1\)su1`
cisco	unified_communications_manager	`8.5\(1\)su2`
cisco	unified_communications_manager	`8.5\(1\)su3`
cisco	unified_communications_manager	`8.5\(1\)su4`
cisco	unified_communications_manager	`8.5\(1\)su5`
cisco	unified_communications_manager	`8.6`
cisco	unified_communications_manager	`8.6\(1\)`
cisco	unified_communications_manager	`8.6\(1a\)`
cisco	unified_communications_manager	`8.6\(2\)`
cisco	unified_communications_manager	`8.6\(2a\)`
cisco	unified_communications_manager	`8.6\(2a\)su1`
cisco	unified_communications_manager	`8.6\(2a\)su2`
cisco	unified_communications_manager	`8.6\(2a\)su3`
cisco	unified_communications_manager	`8.6\(3\)`
cisco	unified_communications_manager	`8.6\(4\)`
cisco	unified_communications_manager	`9.0\(1\)`

References

CWEs

CWE-22

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.