high7.5
CVE-2014-0726
SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attack…
Impact
SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05326.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Communications Manager | through 10.0\(1\) Version 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/103218
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0726
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32843
- http://www.securityfocus.com/bid/65514
- http://osvdb.org/103218
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0726
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32843
- http://www.securityfocus.com/bid/65514