The vulnerability in the web interface of the Cisco Unified Communications Manager (CM) and Cisco Unified Communications Manager Session Management Edition (SME) systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Web interface for managing Cisco Unified Communications Manager CM and Cisco Unified Communications Manager Session Management Edition SME systems is related to insufficient verification of the HTTP request source. Exploiting this vulnerability could allow a malicious act...