← Vulnerability feed

Vulnerability record · CVE-2013-3425 · published 31 July 2013

CVE-2013-3425: Cisco webex permissions and access controls vulnerability

Cisco · Webex

The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965.

4.0 CVSS 2.0 Medium EPSS 1.1% · top 36.0% CWE-264 · Permissions and access controls
4.0CVSS 2.0 base score
1.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965.

AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/95876
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3425 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/86150
http://osvdb.org/95876
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3425 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/86150

Track CVE-2013-3425 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2009-2877Cisco webex memory buffer overflow vulnerabilityStack-based buffer overflow in ataudio.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x (aka T27SP10) for Wind…EPSS 5.1%9.3CVE-2009-2875Cisco webex memory buffer overflow vulnerabilityBuffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for Windows, 26.x before 26.49.35 f…EPSS 5.1%9.3CVE-2009-2880Cisco webex memory buffer overflow vulnerabilityBuffer overflow in atrpui.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for Windows, 26.x before 26.49.35 f…EPSS 5.2%9.3CVE-2009-2878Cisco webex memory buffer overflow vulnerabilityHeap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T…EPSS 5.1%9.3CVE-2009-2876Cisco webex memory buffer overflow vulnerabilityHeap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T…EPSS 5.1%9.3CVE-2009-2879Cisco webex memory buffer overflow vulnerabilityHeap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T…EPSS 5.1%8.8CVE-2017-3823Cisco activetouch general plugin container memory buffer overflow vulnerabilityAn issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Fi…EPSS 27%6.1CVE-2026-20149Cisco webex cross-site scripting vulnerabilityA vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addre…EPSS 0.24%

Source: NIST National Vulnerability Database (record CVE-2013-3425), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.