← Vulnerability feed

Vulnerability record · CVE-2013-5490 · published 23 September 2013

CVE-2013-5490: Cisco prime data center network manager information exposure vulnerability

Cisco · Prime Data Center Network Manager

Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCud80148.

7.8 CVSS 2.0 High EPSS 1.7% · top 23.6% CWE-200 · Information exposure
7.8CVSS 2.0 base score
1.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCud80148.

AV:N/AC:L/Au:N/C:C/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-dcnm Vendor Advisory
http://www.securityfocus.com/bid/62485
https://exchange.xforce.ibmcloud.com/vulnerabilities/87191
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-dcnm Vendor Advisory
http://www.securityfocus.com/bid/62485
https://exchange.xforce.ibmcloud.com/vulnerabilities/87191

Track CVE-2013-5490 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2015-0666Cisco Prime DCNM fmserver servlet path traversal file readThe fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) is vulnerable to directory traversal, letting a remote attacker …KEVEPSS 40%analysed10.0CVE-2013-5486Cisco Prime DCNM path traversal in processImageSave.jsp enables file writeCisco Prime Data Center Network Manager (DCNM) before 6.2(1) contains a directory traversal flaw in processImageSave.jsp where the chartid parameter …EPSS 76%analysed10.0CVE-2012-5417Cisco prime data center network manager permissions and access controls vulnerabilityCisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, which all…EPSS 3.1%9.8CVE-2018-0258Cisco Prime file upload servlet path traversal and arbitrary file executionThe Cisco Prime File Upload servlet in Cisco Prime Data Center Network Manager (10.0 and later) and Cisco Prime Infrastructure (all versions) allows …EPSS 48%analysed9.8CVE-2017-6639Cisco prime data center network manager missing authorization vulnerabilityA vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticate…EPSS 35%9.8CVE-2017-6640Cisco prime data center network manager permissions and access controls vulnerabilityA vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administr…EPSS 11%8.1CVE-2018-0464Cisco prime data center network manager path traversal vulnerabilityA vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks an…EPSS 5.4%7.8CVE-2013-5487Cisco prime data center network manager information exposure vulnerabilityDCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary files via unspecified vecto…EPSS 2.1%

Source: NIST National Vulnerability Database (record CVE-2013-5490), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.