Unscored CVE-2014-0726 EUVD-2014-0757GHSA-7vgv-j288-c9h9

SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier …

Published Feb 13, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05326.

References

65514 vdb-entry
20140212 Cisco Unified Communications Manager IPMA Blind SQL Injection Vulnerability vendor-advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32843
103218 vdb-entry