CVE

Id
70662  
CVE No.
CVE-2014-3366  
Status
Candidate  
Description
SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted response, aka Bug ID CSCup88089.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671732 70662 CVE-2014-3366 CISCO:20141030 Cisco Unified Communications Manager SQL Injection Vulnerability  View
671733 70662 CVE-2014-3366 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3366  View
671734 70662 CVE-2014-3366 BID:70855  View
671735 70662 CVE-2014-3366 URL:http://www.securityfocus.com/bid/70855  View
671736 70662 CVE-2014-3366 SECTRACK:1031160  View
671737 70662 CVE-2014-3366 URL:http://www.securitytracker.com/id/1031160  View
671738 70662 CVE-2014-3366 XF:cisco-ucm-cve20143366-sql-injection(98405)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16288 JVNDB-2014-005163 Cisco Unified Communications Manager のサーバの CCM admin インターフェースにおけるクロスサイトスクリプティングの脆弱性 Cisco Unified Communications Manager のサーバの CCM admin インターフェースには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-3374 70662 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005163.html  View