CVE-2013-6971

MediumCVSS 5.8/10Last modified Jun 17, 2026

Description

Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul57140.

Metrics

CVSS 2.0 5.8/10AV:N/AC:M/Au:N/C:P/I:P/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/100910
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6971Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32146Vendor Advisory
http://www.securitytracker.com/id/1029492Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/89653
http://osvdb.org/100910
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6971Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32146Vendor Advisory
http://www.securitytracker.com/id/1029492Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/89653

Timeline

Published: Dec 14, 2013
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-69725.0Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, b CVE-2013-69734.3Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121.CVE-2013-69744.3Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject CVE-2013-69754.6Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary file CVE-2013-69766.8Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers to hijack the authent CVE-2013-69784.0The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated us CVE-2013-69795.4The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configu CVE-2013-69815.4Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP packe CVE-2013-69824.3The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and CVE-2013-69836.5SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQL CVE-2013-69857.5SQL injection vulnerability in m_worklog/log_searchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows remote attackers to CVE-2013-69862.1The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive in