CVE-2017-6757

Cisco Unified Communications Manager versions 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) are affected by a blind SQL injection vulnerability. The issue stems from a failure to validate user-supplied input used in SQL queries, bypassing protection filters. An authenticated, remote atta...