CVE-2013-3412

Cisco Unified Communications Manager (CUCM) is affected by a blind SQL injection vulnerability (CVE-2013-3412) in versions 7.1(x) through 9.1(2). The issue allows an authenticated, remote attacker to execute arbitrary SQL commands via unspecified vectors, potentially impacting confidentiality, in...