CVE-2013-1245

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-05-16 · updated 2026-06-16
Weakness: CWE-20

Description

The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID CSCue67190.

Affected products

Cisco Webex Social: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1245
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1245

Get alerted when CVE-2013-1245 or the next vulnerability affects your stack