Lucene search
HistoryJun 26, 2015 - 10:59 a.m.
CVE-2015-4222
cisco
unified communications manager
im
presence service
sql injection
vulnerability
remote authenticated users
arbitrary sql commands
bug id
cscuq46325
cve-2015-4222
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
51.2%
SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq46325.
Affected configurations
Node
ciscounified_communications_manager_im_and_presence_serviceMatch9.1\(1\)
Related
prion
prion
Sql injection
2015-06-26 10:59:00
cisco
cisco
Cisco IM and Presence Service SQL Injection Vulnerability
2015-06-24 21:43:50
cvelist
cvelist
CVE-2015-4222
2015-06-26 10:00:00
nvd
nvd
CVE-2015-4222
2015-06-26 10:59:06
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
51.2%
Related for CVE-2015-4222