{"id":"CVE-2013-3438","aliases":["EUVD-2013-3373","GHSA-x783-gcp6-f536"],"status":"published","title":"The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote...","description":"The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01396,"percentile":0.72607,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2013-07-24T01:00:00Z","modified":"2026-06-16T23:55:11Z","products":[{"vendor":"cisco","product":"unified_meetingplace_web_conferencing"}],"references":[{"url":"http://osvdb.org/95583","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3438","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=30186","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3438"},{"url":"https://github.com/advisories/GHSA-x783-gcp6-f536"}],"sources":{"cve":[{"id":"CVE-2013-3438","description":"The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.","status":"published","published":"2013-07-24T01:00:00Z","modified":"2024-08-06T16:07:37.921Z","updated_at":"2026-11-02T14:34:56.872243Z"}],"euvd":[{"id":"EUVD-2013-3373","description":"The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.","status":"published","published":"2013-07-24T01:00:00Z","modified":"2024-08-06T16:07:37Z","updated_at":"2026-11-03T01:56:35.141483Z"}],"ghsa":[{"id":"GHSA-x783-gcp6-f536","title":"The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote...","description":"The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.","status":"published","published":"2022-05-17T03:48:50Z","modified":"2023-01-27T05:09:16Z","updated_at":"2026-11-02T14:43:21.634382Z"}],"nvd":[{"id":"CVE-2013-3438","description":"The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.","status":"published","published":"2013-07-24T12:01:57.703Z","modified":"2026-06-16T23:55:11.657Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:31.592595Z"}]}}