CVE-2013-5486: Cisco Prime Data Center Network Manager

High severity, CVSS 10.0. EPSS: 76% chance of exploitation in the next 30 days.

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.

Affected products

• Cisco Prime Data Center Network Manager: version 4.1(2) only; version 4.1(3) only; version 4.1(4) only; version 4.1(5) only; version 4.2(1) only; version 4.2(3) only; …

Published 2013-09-23. Last modified 2026-06-16.