CVE-2013-1120

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-02-06 · updated 2026-06-16
Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software before 8.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCue35910.

Affected products

Cisco Unity Express: all versions
Cisco Unity Express Software: through 7.4; 1.1.1, 1.1.2, 2.0, 2.1, 2.2, 2.3 (+7)

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1120
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1120

Get alerted when CVE-2013-1120 or the next vulnerability affects your stack