CVEvulnerability

CVE-2011-0960

7.5 HIGH Published 2011-05-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-05-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-89

Description

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716.

Affected configurations

• cisco unified operations manager (<= 8.5) • cisco unified operations manager 1.1 • cisco unified operations manager 2.0 • cisco unified operations manager 2.0.1 • cisco unified operations manager 2.0.2 • cisco unified operations manager 2.0.3 • cisco unified operations manager 2.1 • cisco unified operations manager 2.2 • cisco unified operations manager 2.3 • cisco unified operations manager 8.0

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References