CVE-2015-0699

CVE-2015-0699 affects Cisco Unified Communications Manager (UCM) IVR interface. A SQL injection exists in the IVR component (UCM 10.5(1.98991.13)) that allows an unauthenticated, remote attacker to execute arbitrary SQL via unspecified vectors, as described in Cisco’s advisory (Bug CSCut21563). T...