Sql injection

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates SQL values. ...

CVE-2019-15968 Cisco Unified Communications Domain Manager Persistent Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager Unified CDM could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability...

CVE-2019-15968 Cisco Unified Communications Domain Manager Persistent Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager Unified CDM could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability...

CVE-2019-15968

Cisco Unified Communications Domain Manager (CUCDM) web-based management interface is affected by a cross-site scripting (XSS) vulnerability caused by insufficient input validation. An authenticated remote attacker could lure a user to click a crafted link, enabling arbitrary script execution in ...

CVE-2019-15972

CVE-2019-15972 affects Cisco Unified Communications Manager (CUCM) Web Management Interface. The issue stems from improper validation of SQL values, enabling an authenticated, remote attacker to perform SQL injection and modify or retrieve data from the underlying database. Cisco indicates softwa...

CVE-2019-15972 Cisco Unified Communications Manager SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates SQL values. ...

Cisco Unified Communications Manager SQL Injection Vulnerability (CNVD-2019-42752)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A SQL injection vulnerability...

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability (CNVD-2019-45003)

Cisco Unified Communications Domain Manager CUCDM is a Cisco Cisco company dedicated to unified communications solutions in the call processing components. The component has scalable, distributable, and highly available enterprise voice-over-IP call processing capabilities. A cross-site scripting...

Cisco Unified Communications Domain Manager Persistent Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager Unified CDM could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability...

Cisco Unified Communications Domain Manager CVE-2019-15968 HTML Injection Vulnerability

Description Cisco Unified Communications Domain Manager is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing...

Cisco Unified Communications Manager CVE-2019-15972 SQL Injection Vulnerability

Description Cisco Unified Communications Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit...

The vulnerability in the web interface of the Cisco Unified Communications Manager system allows a perpetrator to disclose protected information.

The vulnerability of the Cisco Unified Communications Manager web interface management interface is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sending a specially crafted SQL query...

The vulnerability in the web interface for managing Cisco Unified Communications Manager systems, including Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, and the integrated messaging system Cisco Unity Connection, allows a perpetrator to send arbitrary requests.

The vulnerability of the Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition SME, Cisco Unified Communications Manager IM and Presence Unified CM IM&P Service, and the integrated messaging system Cisco Unity Connection’s web interfaces is related ...

The vulnerability in the web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager SME systems allows a perpetrator to execute arbitrary codes or access confidential information.

The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager SME web interfaces exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes or gain access to...

The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager SME, Unified Communications Manager IM and Presence Service, and the integrated messaging system Unity Connection allows a perpetrator to execute arbitrary code or gain access to confidential information.

The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager SME, Unified Communications Manager IM and Presence Service, and the integrated messaging system Unity Connection exists due to the lack of security measures taken to protect the w...

The vulnerability of the Cisco Unified Contact Center Express software automation tool, which arises due to insufficient validation of input data, allows attackers to execute cross-site scripting attacks or gain access to confidential information.

The vulnerability of the Cisco Unified Contact Center Express software for automating operator operations exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks or gain access to confidential information ...

The vulnerability in the web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the Web interface for Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose...

The vulnerability in the web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems allows a perpetrator to execute arbitrary code or gain access to confidential information.

The vulnerability of the Web interface for Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition exists due to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

3 Reasons MSPs Must Evolve Beyond Endpoint Detection and Response

Endpoint protection is a critical component of a security strategy. But it’s not enough. Today’s threat landscape is so wide and varied, it requires round-the-clock monitoring, full visibility into IT environments and a multilayered approach to keep hackers at bay. For MSPs, this creates a sizabl...

Intel Graphics Driver Code Issue Vulnerability

Intel Graphics Driver is the Intel graphics card driver. A pointer corruption vulnerability exists in the Unified Shader Compiler in versions prior to Intel Graphics Driver 10.18.14.5074. An attacker could exploit this vulnerability to achieve elevation of privilege...