CVE-2015-0699

MEDIUM · 5.0 CVSS Gepubliceerd: 15-04-2015 CWE-89

Beschrijving

SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563.

Vendors

Cisco

Affected products

Unified Communications Domain Manager

References

tools.cisco.com
www.securitytracker.com