CVE-2014-3287
Cisco Unified Communications Manager SQL Injection via BulkViewFileContentsAction.java
Title source: llmDescription
SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands via crafted filename parameters in a URL, aka Bug ID CSCuo17337.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3287
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/68000
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030411
Scores
EPSS
0.0185
EPSS Percentile
76.9%
Details
CWE
CWE-89
Status
published
Products (1)
cisco/unified_communications_manager
Published
Jun 10, 2014
Tracked Since
Feb 18, 2026