Improper input validation in Cisco Unified Web And E-Mail Interaction Manager

CVE-2015-0753

SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.018 (76.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_web_and_e-mail_interaction_manager — versions 9.0\(2\)
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)