CVE-2014-3339
Cisco Unified Communications Manager and Unified Presence Server - Authenticated SQL Injection
Title source: llmDescription
Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote authenticated users to execute arbitrary SQL commands via crafted input to unspecified pages, aka Bug ID CSCup74290.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3339
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/69200
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/95250
Scores
EPSS
0.0154
EPSS Percentile
72.3%
Details
CWE
CWE-89
Status
published
Products (2)
cisco/unified_communications_domain_manager
cisco/unified_presence_server
Published
Aug 12, 2014
Tracked Since
Feb 18, 2026