CVE-2021-34701

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection could allow an authenticated, remote attacker to access sensitive data on an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to access sensitive files on the affected system.

• CWE-22
• CWE-22

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-path-trav-dKCvktvOPatch, Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-path-trav-dKCvktvOPatch, Vendor Advisory

Published

Nov 4, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34696A vulnerability in the access control list (ACL) programming…5.8
• CVE-2021-34697A vulnerability in the Protection Against Distributed Denial…8.6
• CVE-2021-34698A vulnerability in the proxy service of Cisco AsyncOS for Ci…7.5
• CVE-2021-34699A vulnerability in the TrustSec CLI parser of Cisco IOS and …7.7
• CVE-2021-3470A heap overflow issue was found in Redis in versions before …5.3
• CVE-2021-34700A vulnerability in the CLI interface of Cisco SD-WAN vManage…5.5
• CVE-2021-34702A vulnerability in the web-based management interface of Cis…4.3
• CVE-2021-34703A vulnerability in the Link Layer Discovery Protocol (LLDP) …6.5
• CVE-2021-34704A vulnerability in the web services interface of Cisco Adapt…7.5
• CVE-2021-34705A vulnerability in the Voice Telephony Service Provider (VTS…5.3
• CVE-2021-34706A vulnerability in the web-based management interface of Cis…5.4
• CVE-2021-34707A vulnerability in the REST API of Cisco Evolved Programmabl…6.5