CVE-2009-2047

medium

Description

Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/51731

http://www.vupen.com/english/advisories/2009/1913

http://www.securitytracker.com/id?1022569

http://www.securityfocus.com/bid/35706

http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml

http://secunia.com/advisories/35861

http://osvdb.org/55936

Details

Source: Mitre, NVD

Published: 2009-07-16

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Severity: Medium

EPSS

EPSS: 0.00626