VulnerabilityModified

CVE-2017-6758

MEDIUM 6.5EPSS 3.75%

Does this matter?

Lower severity and a low EPSS score (3.75%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker to access arbitrary files in the context of the web root directory structure on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques to read files in the web root directory structure on the Cisco Unified Communications Manager filesystem. Cisco Bug IDs: CSCve13796.

CVSS 3.0: 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 3.75% probability · 90th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-22
Affected: cisco/unified communications manager
Source: psirt@cisco.com

EPSS trend

EPSS 3.8% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

http://www.securityfocus.com/bid/100119Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039064Third Party Advisory, VDB Entry
https://quickview.cloudapps.cisco.com/quickview/bug/CSCve13796Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ucm1Vendor Advisory
http://www.securityfocus.com/bid/100119Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039064Third Party Advisory, VDB Entry
https://quickview.cloudapps.cisco.com/quickview/bug/CSCve13796Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ucm1Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.