Description
SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38674
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032260
Scores
EPSS
0.0136
EPSS Percentile
68.9%
Details
CWE
CWE-89
Status
published
Products (1)
cisco/unity_connection
11.0\(0.98000.225\)
Published
May 07, 2015
Tracked Since
Feb 18, 2026