CVE-2014-0728 in Unified Communications Manager
Summary
SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05313.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/02/2014
Disclosure
02/13/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 12287 | Cisco Unified Communications Manager Java Database sql injection | 89 | High | Official fix | CVE-2014-0728 |