CVE-2017-12302: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The vulnerability is due to a lack of input validation on user-suppli...

PT-2017-12451

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Software Releases prior to 12.3 Description A vulnerability in the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact...

CVE-2017-12227

A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker...

PT-2017-12417

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder affected versions not specified Description A vulnerability in the SQL database interface could allow an authenticated, remote attacker to conduct a blind SQL injection attack. This is due to a failure to validate...

PT-2017-17252

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure PI and Evolved Programmable Network Manager EPNM versions 2.04.0.45B through 3.11 Description A SQL Injection issue in the SQL database interface could allow an authenticated, remote attacker to impact the...

CVE-2017-6698: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the Cisco Prime Infrastructure PI and Evolved Programmable Network Manager EPNM SQL database interface could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. More...

CVE-2016-6443: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability. More Information:...

PT-2016-6916

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure and Evolved Programmable Network Manager versions 1.2400, 2.01.0.34A, 3.10.128 Description A vulnerability in the SQL database interface could allow an authenticated, remote attacker to impact system confidentiality ...