CVE-2011-4487

Cisco Unified Communications Manager SQL Injection via SCCP Registration

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.6(2a)su1 allows remote attackers to execute arbitrary SQL commands via a crafted SCCP registration, aka Bug ID CSCtu73538.

References (1)

Core 1
Core References

Scores

EPSS 0.0103
EPSS Percentile 60.3%

Details

CWE
CWE-89
Status published
Products (50)
cisco/business_edition_3000
cisco/business_edition_3000_software 8.6\(1\)
cisco/business_edition_3000_software 8.6\(1a\)
cisco/business_edition_3000_software 8.6\(2a\)
cisco/business_edition_3000_software 8.6.2
cisco/business_edition_5000
cisco/business_edition_5000_software 8.5
cisco/business_edition_5000_software 8.5\(1\)
cisco/business_edition_5000_software 8.6
cisco/business_edition_5000_software 8.6\(1\)
... and 40 more
Published Mar 01, 2012
Tracked Since Feb 18, 2026