CVE-2013-6688

medium
Published 2013-11-18 ยท Modified 2026-04-29
CVSS v3
โ€”
CVSS v4 NEW
โ€”
not yet in upstream
VIR risk
6.3

Description

Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222.

Predictions

Exploit likelihood
20%
Patch ETA
โ€”

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or โ€” if you've already worked around this in production โ€” publish your fix to the community-verified tier.

โœš Propose a mitigation on Community โ†’ Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact

VendorProductVersionsFixed
cisco ciscounified_communications_manager{"endIncluding":"9.1\\(1\\)"}
cisco ciscounified_communications_manager3.3\(5\)
cisco ciscounified_communications_manager3.3\(5\)sr1
cisco ciscounified_communications_manager3.3\(5\)sr2a
cisco ciscounified_communications_manager4.1\(3\)
cisco ciscounified_communications_manager4.1\(3\)sr1
cisco ciscounified_communications_manager4.1\(3\)sr2
cisco ciscounified_communications_manager4.1\(3\)sr3
cisco ciscounified_communications_manager4.1\(3\)sr4
cisco ciscounified_communications_manager4.2
cisco ciscounified_communications_manager4.2.1
cisco ciscounified_communications_manager4.2.2
cisco ciscounified_communications_manager4.2.3
cisco ciscounified_communications_manager4.2.3sr1
cisco ciscounified_communications_manager4.2.3sr2
cisco ciscounified_communications_manager4.2.3sr2b
cisco ciscounified_communications_manager4.3
cisco ciscounified_communications_manager4.3\(1\)
cisco ciscounified_communications_manager5.0
cisco ciscounified_communications_manager5.1
cisco ciscounified_communications_manager5.1\(1\)
cisco ciscounified_communications_manager5.1\(1b\)
cisco ciscounified_communications_manager5.1\(1c\)
cisco ciscounified_communications_manager5.1\(2\)
cisco ciscounified_communications_manager5.1\(2a\)
cisco ciscounified_communications_manager5.1\(2b\)
cisco ciscounified_communications_manager5.1\(3\)
cisco ciscounified_communications_manager5.1\(3a\)
cisco ciscounified_communications_manager5.1\(3c\)
cisco ciscounified_communications_manager5.1\(3d\)
cisco ciscounified_communications_manager5.1\(3e\)
cisco ciscounified_communications_manager5.1.2
cisco ciscounified_communications_manager6.0
cisco ciscounified_communications_manager6.0\(1\)
cisco ciscounified_communications_manager6.0\(1a\)
cisco ciscounified_communications_manager6.0\(1b\)
cisco ciscounified_communications_manager6.1\(1\)
cisco ciscounified_communications_manager6.1\(1a\)
cisco ciscounified_communications_manager6.1\(1b\)
cisco ciscounified_communications_manager6.1\(2\)
cisco ciscounified_communications_manager6.1\(2\)su1
cisco ciscounified_communications_manager6.1\(2\)su1a
cisco ciscounified_communications_manager6.1\(3\)
cisco ciscounified_communications_manager6.1\(3a\)
cisco ciscounified_communications_manager6.1\(3b\)
cisco ciscounified_communications_manager6.1\(3b\)su1
cisco ciscounified_communications_manager6.1\(4\)
cisco ciscounified_communications_manager6.1\(4\)su1
cisco ciscounified_communications_manager6.1\(4a\)
cisco ciscounified_communications_manager6.1\(4a\)su2
cisco ciscounified_communications_manager6.1\(5\)
cisco ciscounified_communications_manager6.1\(5\)su1
cisco ciscounified_communications_manager6.1\(5\)su2
cisco ciscounified_communications_manager6.1\(5\)su3
cisco ciscounified_communications_manager7.0\(1\)su1
cisco ciscounified_communications_manager7.0\(1\)su1a
cisco ciscounified_communications_manager7.0\(2\)
cisco ciscounified_communications_manager7.0\(2a\)
cisco ciscounified_communications_manager7.0\(2a\)su1
cisco ciscounified_communications_manager7.0\(2a\)su2
cisco ciscounified_communications_manager7.1\(2a\)
cisco ciscounified_communications_manager7.1\(2a\)su1
cisco ciscounified_communications_manager7.1\(2b\)
cisco ciscounified_communications_manager7.1\(2b\)su1
cisco ciscounified_communications_manager7.1\(3\)
cisco ciscounified_communications_manager7.1\(3a\)
cisco ciscounified_communications_manager7.1\(3a\)su1
cisco ciscounified_communications_manager7.1\(3a\)su1a
cisco ciscounified_communications_manager7.1\(3b\)
cisco ciscounified_communications_manager7.1\(3b\)su1
cisco ciscounified_communications_manager7.1\(3b\)su2
cisco ciscounified_communications_manager7.1\(5\)
cisco ciscounified_communications_manager7.1\(5\)su1
cisco ciscounified_communications_manager7.1\(5\)su1a
cisco ciscounified_communications_manager7.1\(5a\)
cisco ciscounified_communications_manager7.1\(5b\)
cisco ciscounified_communications_manager7.1\(5b\)su1
cisco ciscounified_communications_manager7.1\(5b\)su1a
cisco ciscounified_communications_manager7.1\(5b\)su2
cisco ciscounified_communications_manager7.1\(5b\)su3
cisco ciscounified_communications_manager7.1\(5b\)su4
cisco ciscounified_communications_manager7.1\(5b\)su5
cisco ciscounified_communications_manager7.1\(5b\)su6
cisco ciscounified_communications_manager8.0
cisco ciscounified_communications_manager8.0\(1\)
cisco ciscounified_communications_manager8.0\(2\)
cisco ciscounified_communications_manager8.0\(2a\)
cisco ciscounified_communications_manager8.0\(2b\)
cisco ciscounified_communications_manager8.0\(2c\)
cisco ciscounified_communications_manager8.0\(2c\)su1
cisco ciscounified_communications_manager8.0\(3\)
cisco ciscounified_communications_manager8.0\(3a\)
cisco ciscounified_communications_manager8.0\(3a\)su1
cisco ciscounified_communications_manager8.0\(3a\)su2
cisco ciscounified_communications_manager8.0\(3a\)su3
cisco ciscounified_communications_manager8.5
cisco ciscounified_communications_manager8.5\(1\)
cisco ciscounified_communications_manager8.5\(1\)su1
cisco ciscounified_communications_manager8.5\(1\)su2
cisco ciscounified_communications_manager8.5\(1\)su3
cisco ciscounified_communications_manager8.5\(1\)su4
cisco ciscounified_communications_manager8.5\(1\)su5
cisco ciscounified_communications_manager8.6
cisco ciscounified_communications_manager8.6\(1\)
cisco ciscounified_communications_manager8.6\(1a\)
cisco ciscounified_communications_manager8.6\(2\)
cisco ciscounified_communications_manager8.6\(2a\)
cisco ciscounified_communications_manager8.6\(2a\)su1
cisco ciscounified_communications_manager8.6\(2a\)su2
cisco ciscounified_communications_manager8.6\(2a\)su3
cisco ciscounified_communications_manager8.6\(3\)
cisco ciscounified_communications_manager8.6\(4\)
cisco ciscounified_communications_manager9.0\(1\)

References

CWEs

CWE-22

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.