medium4.0
CVE-2014-3287
SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authent…
Impact
SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands via crafted filename parameters in a URL, aka Bug ID CSCuo17337.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Communications Manager | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3287
- http://www.securityfocus.com/bid/68000
- http://www.securitytracker.com/id/1030411
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3287
- http://www.securityfocus.com/bid/68000
- http://www.securitytracker.com/id/1030411