CVEvulnerability
CVE-2014-3339
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote authenticated users to execute arbitrary SQL commands via crafted input to unspecified pages, aka Bug ID CSCup74290.
Affected configurations
• cisco unified communications domain manager
• cisco unified presence server
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3339 Vendor Advisory
- http://www.securityfocus.com/bid/69200 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95250 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3339 Vendor Advisory
- http://www.securityfocus.com/bid/69200 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95250 exchange.xforce.ibmcloud.com