medium4.9
CVE-2017-6668
Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confide…
Impact
Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc52784 CSCvc97648. Known Affected Releases: 8.1(7)ER1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Communications Domain Manager | Version 8.1\(7\)er1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/98947
- http://www.securitytracker.com/id/1038632
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-cucm2
- http://www.securityfocus.com/bid/98947
- http://www.securitytracker.com/id/1038632
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-cucm2