Unscored CVE-2015-6299 EUVD-2015-6241GHSA-4gf4-55f6-hq4x

SQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier allows remote authenticated users to execut…

Published Sep 20, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

SQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted POST request, aka Bug ID CSCuv63824.

References

20150918 Cisco Unity Connection Web Interface SQL Injection Vulnerability vendor-advisory
1033622 vdb-entry