CVE-2013-3407

no score yetEPSS 1.8%

cisco server provisioner: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.

The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information via a direct request, aka Bug ID CSCug65664.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2013-11-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:server_provisioner

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3407
http://tools.cisco.com/security/center/viewAlert.x?alertId=31776
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3407
http://tools.cisco.com/security/center/viewAlert.x?alertId=31776

Check your stack JSON