CVE-2015-4222

Cisco CVE-2015-4222 affects the Cisco Unified Communications Manager IM and Presence Service, version 9.1(1). A SQL injection flaw in the service’s handling of user input allows an authenticated, remote attacker to execute arbitrary SQL commands via unspecified vectors, potentially impacting conf...