Unscored CVE-2015-6433 EUVD-2015-6374GHSA-7c4p-6jqc-44h4

SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrar…

Published Jan 8, 2016 · Updated Aug 6, 2024 · Assigned by cisco

Description

SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767.

References

1034583 vdb-entry
20160105 Cisco Unified Communications Manager SQL Injection Vulnerability vendor-advisory