Unscored CVE-2014-3339 EUVD-2014-3352GHSA-3jc7-56j7-72r6

Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified P…

Published Aug 12, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote authenticated users to execute arbitrary SQL commands via crafted input to unspecified pages, aka Bug ID CSCup74290.

References

20140812 Cisco Unified Communications Manager and Cisco Unified Presence Server SQL Injection Vulnerability vendor-advisory
69200 vdb-entry
cucm-cups-cve20143339-sql-injection(95250) vdb-entry