NVD

Id
84646  
Name
CVE-2017-3886  
Description
A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The attacker must be authenticated as an administrative user to execute SQL database queries. More Information: CSCvc74291. Known Affected Releases: 1.0(1.10000.10) 11.5(1.10000.6). Known Fixed Releases: 12.0(0.98000.619) 12.0(0.98000.485) 12.0(0.98000.212) 11.5(1.13035.1) 11.0(1.23900.5) 11.0(1.23900.2) 11.0(1.23067.1) 10.5(2.15900.2).  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-04-07  
Modified Date
2017-07-11  
Seq
2017-3886  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
417270 84646 CVE-2017-2419 97129  View
417271 84646 CVE-2017-2419 https://support.apple.com/HT207600  View
417272 84646 CVE-2017-2419 https://support.apple.com/HT207617  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66748 JVNDB-2017-003073 Cisco Unified Communications Manager の Web インターフェースにおける SQL インジェクションの脆弱性 Cisco Unified Communications Manager の Web インターフェースには、SQL インジェクションの脆弱性が存在します。 CVE-2017-3886 0 CVE-2017-3886 84646 4 4.9 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003073.html 2017-04-05 2017-05-12 View