{"id":"CVE-2011-1607","url":"https://www.cyber-defence.io/tools/cve/CVE-2011-1607","generatedAt":"2026-10-28T04:31:00.903Z","title":"Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to…","description":"Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an upload request, aka Bug ID CSCti81603.","published":"2011-05-03T22:55:02.000Z","lastModified":"2026-06-16T23:29:43.000Z","status":"Modified","sourceIdentifier":"psirt@cisco.com","cvss":{"version":"2.0","score":6.5,"severity":"MEDIUM","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P"},"cwe":["CWE-22"],"affected":["cisco/unified communications manager"],"epss":{"score":0.02261,"percentile":0.82894,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (2.26%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/44331","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtml","tags":["Vendor Advisory"],"source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/47608","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1025449","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2011/1122","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67127","source":"psirt@cisco.com"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/44331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtml","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/47608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1025449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/1122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67127","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-1607","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}