CVE-2013-3403

CVE-2013-3403 is a medium-severity vulnerability in Cisco Unified Communications Manager with a CVSS 2.0 base score of 6.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Description

Multiple untrusted search path vulnerabilities in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allow local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCuh73454.

Frequently asked questions

What is CVE-2013-3403?
Multiple untrusted search path vulnerabilities in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allow local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCuh73454.
How severe is CVE-2013-3403?
CVE-2013-3403 has a CVSS 2.0 base score of 6.8, rated medium severity.
Is CVE-2013-3403 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (25th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2013-3403?
CVE-2013-3403 primarily affects Cisco Unified Communications Manager. In total, 55 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2013-3403?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2013-3403 published?
CVE-2013-3403 was published on 2013-07-18 and last updated on 2026-06-16.

References

Affected products (55)

More vulnerabilities in Cisco Unified Communications Manager

All CVEs affecting Cisco Unified Communications Manager →