CVEvulnerability
CVE-2014-3287
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-06-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands via crafted filename parameters in a URL, aka Bug ID CSCuo17337.
Affected configurations
• cisco unified communications manager
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3287 Vendor Advisory
- http://www.securityfocus.com/bid/68000 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030411 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3287 Vendor Advisory
- http://www.securityfocus.com/bid/68000 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030411 Third Party Advisory, VDB Entry