UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL.
| Software | From | Fixed in |
|---|---|---|
| newatlanta / servletexec | 2.2 | 2.2.x |
| newatlanta / servletexec | 3.0 | 3.0.x |