CVE-2015-0699

Cisco Unified Communications Manager 10.5(1.98991.13) - SQL Injection in IVR Component

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032134
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38366

Scores

EPSS 0.0189
EPSS Percentile 77.4%

Details

CWE
CWE-89
Status published
Products (1)
cisco/unified_communications_domain_manager 10.5\(1.98991.13\)
Published Apr 15, 2015
Tracked Since Feb 18, 2026