Sql injection

2015-06-2610:59:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.2%

JSON

SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq46325.

CPENameOperatorVersion
unified_communications_manager_im_and_presence_serviceeq9.11.0

CPE	Name	Operator	Version
	unified_communications_manager_im_and_presence_service	eq	9.11.0

References

tools.cisco.com/security/center/viewAlert.x?alertId=39506

www.securityfocus.com/bid/75400

www.securitytracker.com/id/1032716