medium6.5
CVE-2014-3339
Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS…
Impact
Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote authenticated users to execute arbitrary SQL commands via crafted input to unspecified pages, aka Bug ID CSCup74290.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Communications Domain Manager | All versions |
| Cisco | Unified Presence Server | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3339
- http://www.securityfocus.com/bid/69200
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95250
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3339
- http://www.securityfocus.com/bid/69200
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95250