Unscored CVE-2014-0727 EUVD-2014-0758GHSA-mj99-7g8m-f698

SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) a…

Published Feb 13, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05318.

References

20140212 Cisco Unified Communications Manager CMIVR Blind SQL Injection Vulnerability vendor-advisory
65516 vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=32844
103219 vdb-entry