SQL Injection in Cisco Unified_communications_domain_manager

CVE-2015-0699

SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCu…

Vulnerability class: SQL Injection

EPSS: 0.003 (54.8th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_communications_domain_manager — versions 10.5\(1.98991.13\)
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

1032134 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
20150414 Cisco Unified Communications Manager Interactive Voice Response Interface SQL Injection Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)