high7.5
CVE-2014-0728
SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute…
Impact
SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05313.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Communications Manager | through 10.0\(1\) Version 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/103221
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0728
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32834
- http://www.securityfocus.com/bid/65499
- http://osvdb.org/103221
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0728
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32834
- http://www.securityfocus.com/bid/65499