high7.5
CVE-2014-0727
SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) allows remote attacke…
Impact
SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05318.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Communications Manager | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/103219
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0727
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32844
- http://www.securityfocus.com/bid/65516
- http://osvdb.org/103219
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0727
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32844
- http://www.securityfocus.com/bid/65516