high7.5
CVE-2014-0729
SQL injection vulnerability in the Enterprise Mobility Application (EMApp) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to e…
Impact
SQL injection vulnerability in the Enterprise Mobility Application (EMApp) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05302.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Communications Manager | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/103220
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0729
- http://www.securityfocus.com/bid/65501
- http://osvdb.org/103220
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0729
- http://www.securityfocus.com/bid/65501