CVE-2014-0727

Cisco Unified Communications Manager - SQL Injection via CMIVR Interface URL

Title source: llm

Description

SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05318.

References (4)

Core 4

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0727

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/65516

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=32844

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/103219

Scores

EPSS 0.0126

EPSS Percentile 66.5%

Details

CWE

CWE-89

Status published

Products (1)

cisco/unified_communications_manager

Published Feb 13, 2014

Tracked Since Feb 18, 2026