Unscored CVE-2014-0728 EUVD-2014-0759GHSA-j2x5-69mm-hfg9

SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote …

Published Feb 13, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05313.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=32834
103221 vdb-entry
65499 vdb-entry
20140211 Cisco Unified Communications Manager Java Interface SQL Injection Vulnerability vendor-advisory