CVE

Id
70632  
CVE No.
CVE-2014-3336  
Status
Candidate  
Description
SQL injection vulnerability in the web framework in Cisco Unity Connection 9.1(2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted request, aka Bug ID CSCuq31016.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671491 70632 CVE-2014-3336 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=35228  View
671492 70632 CVE-2014-3336 CISCO:20140808 Cisco Unity Connection SQL Injection Vulnerability  View
671493 70632 CVE-2014-3336 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3336  View
671494 70632 CVE-2014-3336 BID:69163  View
671495 70632 CVE-2014-3336 URL:http://www.securityfocus.com/bid/69163  View
671496 70632 CVE-2014-3336 SECTRACK:1030704  View
671497 70632 CVE-2014-3336 URL:http://www.securitytracker.com/id/1030704  View
671498 70632 CVE-2014-3336 SECUNIA:59498  View
671499 70632 CVE-2014-3336 URL:http://secunia.com/advisories/59498  View
671500 70632 CVE-2014-3336 XF:cisco-unity-cve20143336-sql-injection(95187)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15111 JVNDB-2014-003986 Cisco Transport Gateway for Smart Call Home の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性 Cisco Transport Gateway for Smart Call Home (別名 TG-SCH または Transport Gateway Installation Software) の Web フレームワークには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-3344 70632 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003986.html  View