VulnerabilityModified
CVE-2013-6967
Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36020.
MEDIUM 5.8EPSS 2.12%
Does this matter?
Lower severity and a low EPSS score (2.12%). Track it; it rarely justifies an emergency change on its own.
Description
Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36020.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 2.12% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/webex sales center
- Source
- psirt@cisco.com
References
- http://osvdb.org/100912
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6967Vendor Advisory
- http://www.securitytracker.com/id/1029493Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89685
- http://osvdb.org/100912
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6967Vendor Advisory
- http://www.securitytracker.com/id/1029493Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89685
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.