Unscored CVE-2014-3366 EUVD-2014-3379GHSA-h548-g9pr-625m

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote authenticated users t…

Published Oct 31, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted response, aka Bug ID CSCup88089.

References

70855 vdb-entry
cisco-ucm-cve20143366-sql-injection(98405) vdb-entry
20141030 Cisco Unified Communications Manager SQL Injection Vulnerability vendor-advisory
1031160 vdb-entry