SQL Injection in Cisco Unified_communications_manager_im_and_presence_service
CVE-2015-4222
SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq46325.
Vulnerability class: SQL Injection
EPSS: 0.005 (66.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_communications_manager_im_and_presence_service — versions 9.1\(1\)
- N/a — versions n/a
Weakness classification (CWE)
References
- 20150624 Cisco IM and Presence Service SQL Injection Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- 75400 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
- 1032716 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)