CVE-2011-3315
65Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 26%
from disclosure to weapon0 days
Published on NVDOct 27
1st PoCOct 26
VulnCheck+5026d
exploitation probability
26%top 2% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049.
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/36256vulncheckvulncheck.com/xdb/9a5914dbfda8unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.